Scripting Wireless - Windows XP/Vista

[barryfl]

Afternoon All,

Just wondered if anyone here had ever managed to script wireless settings. I want to create a deployment script but by the looks of it I don't think you can do it.

Any ideas?

Barry

**Mods - Needs a move to scripts - My bad**

[Irazmus]

This is the method I'm currently using tagged onto the end of a RIS install
http://www.russdev.com/edugeek/doku....autowificonfig

[plexer]

What is your setup? server 2003, what wireless settings, ssid, wpa key etc..?

I use GPO's to push out the wireless config for my wireless network.

Ben

[NetworkGeezer]

I use GPO's to push out the wireless config for my wireless network.

Ben

Tell us how you did it Ben. Did you just use MSI Wrapper Wizard thingy with Russ's script?

[plexer]

There is a wireless security gpo.

In computer configuration, security settings I think it is.

I push out the configuration from here, ssid, wpa, 802.1x, machine auth only, etc...

Ben

[djm968]

Pushing wirless settings via GPO has never worked for me. If your wireless clients use the IntelPro chipset you can configure an Administator profile to pre-logon connect and build this into the image. This is the most reliable method I have used.

[Irazmus]

The GPO approach didn't worked for me either, could never find where to list the WEP key. Will look into it again when we put in the replacement wireless network which will have better security.

[plexer]

I've never used it for wep key just wpa enterprise and 802.1x

Ben

[ajbritton]

You cannot push out the WEP key via GPO. That's why I came up with the horrible method on the WIKI.

[eean]

I use the Wireless Setup Wizard on the control panel. This copies a exe and a ini file onto a pen drive. You can run it from a folder on the hard drive but you have to use the subst command to create a drive letter to that folder (to trick it). I made the following script. This is a .bat file that creates a temporary drive letter. Then it calls an AutoIt script file that automates all the OKs etc...
Use on the end of our automated cd setup. It has never skipped a beat.


Bat file here:

@ECHO OFF
ECHO Setup in progress. Please do not touch.

REM This script runs the windows xp wireless setup wizard.

REM This 'maps' the t: drive to c:\windows\setuptemp\03_setupwireless
SUBST T: %SystemRoot%\SetupTemp\03_SetupWireless

ECHO Installing Wireless Network

REM Start the Windows Wireless setup wizard.
START /W  %systemroot%\SetupTemp\Autoit3.exe %systemroot%\SetupTemp\03_SetupWireless\Setup.au3

Auto it file here:

;This script automates the instillation windows wireless setup wizard
Splashtexton("Setup", "Setting up wireless connection. Please do not touch.", 500, 100)

;Prevent user sending any keystrokes
BlockInput(1)

Run ("t:\setupSNK.exe")

WinWait ("Wireless Network Setup Wizard", "Do you want to add")

Send ("{ENTER}")

WinWaitClose ("Wireless Network Setup Wizard", "Do you want to add")

WinWait ("Wireless Network Setup Wizard")

Send ("{ENTER}")

;Allow Keystrokes to be sent by user
BlockInput(0)

You need to put the bat file and autoit3.exe in c:\windows\setuptemp.
You need to put the autoit script and setupsnk.exe and all the other wireless setup files in c:\windows\setuptemp\03_setupwireless

EDIT: Unlikely to work on vista!

[Irazmus]

You cannot push out the WEP key via GPO. That's why I came up with the horrible method on the WIKI.

Hence why I use the beautiful method on the Wiki

[JDismukes-BResource]

Once you use the network wizaard and have your usb key. You can copy the setupsnk.exe and the subdirectory to a local directory.

Then use the subst command to create a temp drive mapping.

Example:
Subst z: "Driveletter:\whatever path you want"
z:
setupsnk.exe
subst z: /D


This will give you two prompts. One to verify you want to install and the other to state it is completed.

You can use autoit to automate the install and dialog box prompts as well.

Hope the info helps.

[gnarlyc]

Seriously, you should try the WPA/802.1x via GPOs. It works great. My techs can crack your WEP key in 15 minutes or less. Move on. WEP should not be an option anymore, especially if you have any confidential data on your network.

Alan

[Geoff]

Also be aware WPA-PSK is vulnerable to brute force attack via rainbow tables.

[JDismukes-BResource]

I just posted because it seems to be an easier way to install wep drivers. Dont have to worry about mounting ISO's and such.

Tech's dont always get the luxury of making the calls. Management/clients normaly override decisions. Doesn't matter how much you state unsecure, hack or anything else.

It's like pitching a backup solution to a small business, until something crashes it's not a priority