Wireless Network (IEEE 802.11) Policies in local group policy ?

Page 1 of 2 12 LastLast

  1. Posts : 130
    Windows 10 Professional x64
       #1

    Wireless Network (IEEE 802.11) Policies in local group policy ?


    Dear forum readers,

    I know it's possible to configure Wireless settings by policy. However it seems absent from the local group policy, which is where I would like to put it.

    How can I do ? Maybe it would work if I copy the corresponding "Wireless Network (IEEE 802.11) Policies" section from a non-local policy template, then import in my local group policy ? I would need such a template though, since I don't know how it looks like.

    I'm speaking of the security templates here (the inf files), not the admx files which I have already since I have W10 Pro...
      My Computer

  2. bro67's Avatar
    Posts : 8,350
    Mac OS Catalina
       #2

    GPO is meant more for a Domain setup. Without a Domain, any user can just over ride the settings.
      My Computers


  3. Posts : 130
    Windows 10 Professional x64
    Thread Starter
       #3

    System-wide local group policy can't be overridden by non-admins, and that's precisely why I want to do this, because it seems the only way to have all users wireless profiles that can't be modified by any user...
      My Computer

  4. bro67's Avatar
    Posts : 8,350
    Mac OS Catalina
       #4

    NovHak said:
    System-wide local group policy can't be overridden by non-admins, and that's precisely why I want to do this, because it seems the only way to have all users wireless profiles that can't be modified by any user...
    Actually they can without being on a domain. There is no such thing as a non-admin on Windows anymore. Everyone is kept as an admin, because of how Microsoft has made it so that either you get the annoyance from UAC and their Sandbox if you downgrade a user's rights that they have to have a admin password to do everything, or run them as an admin, without a domain policy and script that keeps them from going around the locks.
      My Computers


  5. Posts : 130
    Windows 10 Professional x64
    Thread Starter
       #5

    bro67, your answer is confusing to say the least. In a nutshell, you're saying there's no such thing as non-admin because it's too anoying to be a non-admin, and that one should rely on an external domain policy+scripts to achieve security locally.

    I find this higly risky... While I guess you'll be able to restrict what programs users can run, and maybe even prevent the local administrator from leaving the domain, I don't think GPOs are designed to act as a replacement for the local admin/non admin privilege separation.

    Anyway, it would be higly useful if someone could post me GPO inf files containing a wireless network policy section (or links to which syntax I should use) so that I can try putting it in my local group policy, because the local GPO editor doesn't give the option to create wireless network policies.

    Maybe it's impossible after all and importing such a policy as a local GPO would fail, but who knows without trying ?
      My Computer

  6. bro67's Avatar
    Posts : 8,350
    Mac OS Catalina
       #6

    Nothing really confusing about it. Anyone that uses a stand alone workstation can get around the stand alone workstation and user policies that I or you could place on the OS for that user. Only way to lock them from doing any changes, is by going through and using an AD setup using an alternative Server OS to take the place of Windows Server if you wanted to do it on a small scale budget or setup.

    I try to stay to the minimum with any changes on Windows 7. Windows 10 I do not even bother, because of the pure fact that Microsoft is always changing things on it, so that it is always evolving into a more mature OS each time they make some major change.

    Changing WIFI and Network policies on a workstation is only asking for headaches. There is no easy way to do it with Windows 10 as I mentioned about Microsoft evolving the OS every time they push out a new major update.
      My Computers


  7. Posts : 130
    Windows 10 Professional x64
    Thread Starter
       #7

    bro67 said:
    Changing WIFI and Network policies on a workstation is only asking for headaches.
    I am asking for headaches. I will come back here when (if ?) I find answers, in case someone is interested !
      My Computer


  8. Posts : 2
    Windows 7
       #8

    bro67 said:
    Anyone that uses a stand alone workstation can get around the stand alone workstation and user policies that I or you could place on the OS for that user.
    Really? Care to elaborate? If I do not give a user admin privileges and give them very restricted privileges, just how does the user do this? And why does having an AD domain make any difference? And we'll assume the admin passwords are a good 20 character random string.
      My Computer


  9. Posts : 2
    Windows 7
       #9

    NovHak said:
    I am asking for headaches. I will come back here when (if ?) I find answers, in case someone is interested !
    Strangely, I am looking for the same headaches, bro67's comments not withstanding. In fact, I also need the .admx files for a good wifi policy. I cannot seem to find anything for download for "Wireless Network (IEEE 802.11) Policies", and my machine does not have it. Did you ever find anything? Thanks.
      My Computer


  10. Posts : 130
    Windows 10 Professional x64
    Thread Starter
       #10

    I had temporarily stopped searching, but your message renewed my interest, and I finally found more :
    https://msdn.microsoft.com/library/cc232934.aspx

    This is interesting because it contains schemas for XML wireless network policy files as well as examples. Presumably, one could create such an XML file in some protected directory, then go to HKLM\Software\Policies\Microsoft\Windows\Wireless\GPTWirelessPolicy, create a string value named Path and containing the path to this policy file.

    I'm supposing this out of this post, but didn't try yet. Keep us informed if you ever meet some success ! Of course I will as well.
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 01:02.
Find Us




Windows 10 Forums