cheers mate
Main Topics
Browse All Topicshey all
We are soon to deploy a new wireless policy which is nearing completion. I wanted to know if there was a way to setup group policy to disable the use of ad-hoc wireless connections on machines.
E.g. once you are authenticated to our domain, your machine cannot create or participate in ad-hoc wireless networks.
Assuming this would be possible, would it then be possible for the same machines to participate in wireless ad-hoc networks when they were *not* connected to our domain - at home etc.
thanks
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Ok, I think this will not allow them to connect to anything when they are off the domain. Don't you agree? Won't this interfere with their ability to connect to say their home wireless?
I just don't think this policy really does what the question asked. I think the policy is to disallow the connection to unapproved wireless networks not really to prevent the creation of ad-hoc networks. Now, I am getting to think that the creation/connection to ad-hoc is really the same function but regardless, I am concerned about when they are not at corporate. I suspect that most of our laptop users want to connect to wireless at home/airport/hotel.
I found that to simply disable ad-hoc (which I think is reasonable) try this:
This is supposed to simply disable ad-hoc on Vista and Windows 7 but according out laptop support guys who tested a XP SP3 machine, it worked as well.
(run as admin)
netsh wlan add filter permission=denyall networktype=adhoc
Business Accounts
Answer for Membership
by: billythehamsterPosted on 2007-09-29 at 23:49:00ID: 19986401
You can do this in the following way:
1. Create a new GPO or edit an existing one. The best tool for creating, linking and editing GPOs in the Group Policy Management Console (or GPMC).
2. Edit the GPO you've selected, and expand Computer Configuration > Security Settings. You'll notice a node called Wireless Network (IEEE 802.11) Policies.
3. Right-click Wireless Network (IEEE 802.11) Policies and select Create Wireless Network Policy
4. In the Wireless Network Policy window click Next.
5. In the Name box type a descriptive name for the new policy. Click Next.
6. In the final window make sure Edit Properties is selected, and click Finish.
7. In the Wireless Policy Properties window on the General tab you can change the policy's name, the refresh interval (by default - 180 minutes), the ability to force the client computers to only connect to infrastructure devices (versus the ability to connect to any available device, including Ad-Hoc networks), and the option to force the default Windows client WiFi tool (versus other 3rd-party tools such as the excellent Intel PROSet/Wireless client).
8. On the Preferred Networks tab you can add a list of the preferred WiFi networks that the clients are allowed to connect to. The client will only connect to these networks as long as it has had the Wireless GPO applied to it.
When you click on Add you can enter the Wireless's network Name (SSID), just make sure you type it exactly as it is broadcast by the Wireless Access Point. You can also configure the level of authentication and encryption of the preferred network.
On the IEEE 802.1X tab of the New Preferred Setting Properties window you can configure the desired authentication method required by the Wireless network you're connecting to.
When finished click Ok.
9. When you're done, close the GPO editor tool.
Although limited in scope, these settings can be used to configure the basic settings for the client computer.