Wireless setings GPO

[lafleur1977]

Hi all,

 

I have been trying to send wireless settings via GPO to client machines. I have been able to add various wireless profiles for XP and Vista but neither allow me to enter a wireless network key.

 

I have been going to:

 

Computer > policies > windows settings > security settings > wireless network 802.11 policies.

 

Any ideas? I am trying to do this so we don't have to manually add wireless settings and often the settings get altered and users can't connect.

 

Thanks

[danrhodes]

Hi all,

 

I have been trying to send wireless settings via GPO to client machines. I have been able to add various wireless profiles for XP and Vista but neither allow me to enter a wireless network key.

 

I have been going to:

 

Computer > policies > windows settings > security settings > wireless network 802.11 policies.

 

Any ideas? I am trying to do this so we don't have to manually add wireless settings and often the settings get altered and users can't connect.

 

Thanks

 

Those can't be deployed. If you're seeking a 100% Group Policy

administration solution, I guess you'd have to go with a certificate

based solution where clients are authenticated through certificates that

got rolled out with GP.

 

The encryption keys can't be rolled out with Group Policy

 

D

[lafleur1977]

Thanks for your reply.

 

Didn't think is was possible but was just wondering. How secure is the certificate option? Do you have any links to point me in the direction of setting it up?

 

 

Thanks.

[danrhodes]

Not something I do regular.

 

Define 802.1X authentication for wireless networks in Group Policy: Wireless

 

 

You need to create a trusted and signed cert on your CA then export it to the clients via GP, this way they will be able to connect to your wireless network.

 

D

[sted]

you can add a script that fires the setting out though using WifiCfg_XP

 

something like

 

@ECHO OFF
REM --- Check for an existing installation of WifiCfg_XP.exe
if exist "c:\windows\WifiCfg_XP.exe" goto _End
copy "\\server\hiddenshare$\WifiCfg_XP.exe" c:\windows
Wificfg_xp.exe -add /SSID:myssid /Authentication:WPAPSK /NetworkKey:eatatjoes /Encryption:TKIP
REM --- End of the script
:_End

 

as long as the script is kept in a safe non-obvious location shouldnt be too much of a risk but id avoid putting it in netlogon

[spc-rocket]

Not something I do regular.

 

Define 802.1X authentication for wireless networks in Group Policy: Wireless

 

 

You need to create a trusted and signed cert on your CA then export it to the clients via GP, this way they will be able to connect to your wireless network.

 

D

 

You can use the 802.1x authentication with MSCHAP v2 and TKIP. This only requires a cert to be issued to the IAS (Radius) server only and does not need the certificate deploying to the client unless they are not part of the domain.

 

More details and a step-by-step guide that i wrote.

 

http://www.edugeek.net/forums/networks/13961-wireless-802-1x-radius-authentication-using-ias-server.html

 

Ash.

[danrhodes]

You can use the 802.1x authentication with MSCHAP v2 and TKIP. This only requires a cert to be issued to the IAS (Radius) server only and does not need the certificate deploying to the client unless they are not part of the domain.

 

More details and a step-by-step guide that i wrote.

 

http://www.edugeek.net/forums/networks/13961-wireless-802-1x-radius-authentication-using-ias-server.html

 

Ash.

 

Taken a copy of that onto my Pen, thanks Ash.