Windows 10: Wireless Network (IEEE 802.11) Policies in local group policy ?

Dear forum readers,

I know it's possible to configure Wireless settings by policy. However it seems absent from the local group policy, which is where I would like to put it.

How can I do ? Maybe it would work if I copy the corresponding "Wireless Network (IEEE 802.11) Policies" section from a non-local policy template, then import in my local group policy ? I would need such a template though, since I don't know how it looks like.

I'm speaking of the security templates here (the inf files), not the admx files which I have already since I have W10 Pro...

:)

 

Cannot conect to my IEEE 802.1X Wireless Network after upgrade to Windows 10 Creators Update

Cannot connect to my IEEE 802.1X Wireless Network after upgrade to Windows 10 Creators Update

Windows 10 is 1503.250

I can connect to other Wireless Networks

Others in my network running Windows 10 1607 can connect to the IEEE 802.1X Wireless Network

The network is defined in AD Wireless Network (802.11) Policies (see the image below)

The computer certificate is valid

 

Clicking the wifi icon tries to bring up the available networks but closes before it can find anything

I'm on this att wi-fi connection as I write this.

The tool you gave me did not find the problem and gave me this:

Diagnostics Information (Network Adapter)

Diagnostics Information (Wireless Connectivity)

Diagnostics Information (Wireless Connectivity)

Diagnostics Information (Wireless Network Adapter)

Network Diagnostics Log

File Name:
L: AD3A32EA-ACC3-403D-A2B8-76883722A762.Diagnose.0.etl

Network Diagnostics Log

File Name:
L: F247BF92-4524-4EF6-B177-CCFF05462B65.Diagnose.1.etl

Other Networking Configuration and Logs

File Name:
L: NetworkConfiguration.cab

Other Networking Configuration and Logs

File Name:
L: NetworkConfiguration.cab

Collection information

Computer Name:
TAMIPC

Windows Version:

10.0

Architecture:

x64

Time:

Thursday, April 20, 2017 2:57:25 PM

Publisher details

Windows Network Diagnostics

Detects problems with network connectivity.

Package Version:

4.0

Publisher:

 

GPO is meant more for a Domain setup. Without a Domain, any user can just over ride the settings.

 

System-wide local group policy can't be overridden by non-admins, and that's precisely why I want to do this, because it seems the only way to have all users wireless profiles that can't be modified by any user...

 

Actually they can without being on a domain. There is no such thing as a non-admin on Windows anymore. Everyone is kept as an admin, because of how Microsoft has made it so that either you get the annoyance from UAC and their Sandbox if you downgrade a user's rights that they have to have a admin password to do everything, or run them as an admin, without a domain policy and script that keeps them from going around the locks.

 

bro67, your answer is confusing to say the least. In a nutshell, you're saying there's no such thing as non-admin because it's too anoying to be a non-admin, and that one should rely on an external domain policy+scripts to achieve security locally.

I find this higly risky... While I guess you'll be able to restrict what programs users can run, and maybe even prevent the local administrator from leaving the domain, I don't think GPOs are designed to act as a replacement for the local admin/non admin privilege separation.

Anyway, it would be higly useful if someone could post me GPO inf files containing a wireless network policy section (or links to which syntax I should use) so that I can try putting it in my local group policy, because the local GPO editor doesn't give the option to create wireless network policies.

Maybe it's impossible after all and importing such a policy as a local GPO would fail, but who knows without trying ?

 

Nothing really confusing about it. Anyone that uses a stand alone workstation can get around the stand alone workstation and user policies that I or you could place on the OS for that user. Only way to lock them from doing any changes, is by going through and using an AD setup using an alternative Server OS to take the place of Windows Server if you wanted to do it on a small scale budget or setup.

I try to stay to the minimum with any changes on Windows 7. Windows 10 I do not even bother, because of the pure fact that Microsoft is always changing things on it, so that it is always evolving into a more mature OS each time they make some major change.

Changing WIFI and Network policies on a workstation is only asking for headaches. There is no easy way to do it with Windows 10 as I mentioned about Microsoft evolving the OS every time they push out a new major update.

 

I am asking for headaches. I will come back here when (if ?) I find answers, in case someone is interested !

 

Really? Care to elaborate? If I do not give a user admin privileges and give them very restricted privileges, just how does the user do this? And why does having an AD domain make any difference? And we'll assume the admin passwords are a good 20 character random string.

 

Strangely, I am looking for the same headaches, bro67's comments not withstanding. In fact, I also need the .admx files for a good wifi policy. I cannot seem to find anything for download for "Wireless Network (IEEE 802.11) Policies", and my machine does not have it. Did you ever find anything? Thanks.

 

I had temporarily stopped searching, but your message renewed my interest, and I finally found more :
https://msdn.microsoft.com/library/cc232934.aspx

This is interesting because it contains schemas for XML wireless network policy files as well as examples. Presumably, one could create such an XML file in some protected directory, then go to HKLM\Software\Policies\Microsoft\Windows\Wireless\GPTWirelessPolicy, create a string value named Path and containing the path to this policy file.

I'm supposing this out of this post, but didn't try yet. Keep us informed if you ever meet some success ! Of course I will as well.