diff --git a/cli-windows/set-dockernat-networkategory-to-private.ps1 b/cli-windows/set-dockernat-networkategory-to-private.ps1
new file mode 100644
index 000000000..6614c8e8a
--- /dev/null
+++ b/cli-windows/set-dockernat-networkategory-to-private.ps1
@@ -0,0 +1,2 @@
+ #Requires -RunAsAdministrator
+ Get-NetConnectionProfile | Where-Object { $_.InterfaceAlias -match "(DockerNAT)" } | ForEach-Object { Set-NetConnectionProfile -InterfaceIndex $_.InterfaceIndex -NetworkCategory Private }