Solved

Restrict Wireless to only one preferred network

Posted on 2007-11-14
11
2,273 Views
Last Modified: 2012-06-27
We have several Laptops that we have deployed in vehicles that have wireless access to our network.   We also have EVDO modems installed on these laptops.  The logic is they would use our wireless access points when within range and then switch to the cellular EVDO network when out of range of our wireless access points.  

We have a GPO setup to configure the laptops with our "preferred network" as well as have it set to "Access Point (infrastructure) networks only.  We also have the "Automatically connect to non-preferred networks" setting not selected.

The problem is our laptops are picking up other access points and populating the Preferred Networks (below our SSID).  When out of range of our access points, this is causing the laptops to attempt to connect to those access points instead of attempting to connect via our EVDO network.

Is there a way to only allow our configured Preferred Network and reject all others for being discovered?
0
Comment
Question by:Pber
  • 3
  • 3
  • 3
  • +2
11 Comments
 
LVL 1

Assisted Solution

by:StevenTodd00
StevenTodd00 earned 50 total points
ID: 20282523
If thier is a known SSID you don't want them to try to conenct to, try to create a profile, but put in false codes.  You won't be able to keep SSID's from displaying (that would be counter to what Wifi for all is all about).  You could also set them as lower SSID's on the preferred list.

0
 
LVL 66

Expert Comment

by:johnb6767
ID: 20282547
What kinds of NICs are they?
0
 
LVL 5

Assisted Solution

by:administradores
administradores earned 50 total points
ID: 20282675
Well if you disable "Automatically connect to non-preferred networks" and delete all SSID from the list, then the WZCS won't connect but will show a message telling that a network is available, but the user can connect manually.

An alternative is to disable WZCS and use another connection manager (if there are any for your wireless cards), or to create a little application that replace WZCS.

You can read more about WZCS at microsoft site .

http://technet.microsoft.com/es-es/library/bb878124.aspx
0
 
LVL 5

Expert Comment

by:DToolshed
ID: 20282713
A little user education would help. In your configuration, the preferred list will not populate with any SSID, unless a connection has been attempted by the user.
0
 
LVL 5

Expert Comment

by:administradores
ID: 20282825
But the user can always attempt the connection manually and the list will populate, and the admin can prevent that an user will try to connect.....
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 
LVL 5

Expert Comment

by:administradores
ID: 20282832
where i say can i mean can't, sorry.
0
 
LVL 26

Author Comment

by:Pber
ID: 20282998
Thanks for the input.

The problem didn't show up in the pilot and now that we've gone into production we got the problem dropped on our laps to try and solve.  Poor pilot in my opinion.  

We have multiple vehicles with over 100 preferred networks after driving around for a few hours.  Despite the settings indicating not to "Automatically connect to non-preferred networks".   The users also say they haven't been attempting manual connentions.

Administradores,
I'll look into the WZCS.

I the Wireless NIC is: Intel® PRO/Wireless 2915ABG
the EVDO modem is: Sierra Wireless 1xEV-DO Network Adapter
0
 
LVL 66

Accepted Solution

by:
johnb6767 earned 400 total points
ID: 20283110
Are you allowing the MGMT app (VZAccess mgr by any chance?) to handle WWAN AND WAN connections?

I would reaaaally try and use the Intel proset again. under the application settings, you can specify to connect with Profiles only, and this problem should be resolved. The proset wireless is easily packaged, and supports Single Sign On and Pre login authentication to contact the WIFI prior to the DC for logging in wirelessly.

You can also create Administratively assigned profile's which a user cant accidentally delete....
0
 
LVL 26

Author Comment

by:Pber
ID: 20283143
John6767,

Interesting information, I will pass it on and see what comes of that.

Thanks.
0
 
LVL 26

Author Comment

by:Pber
ID: 20339256
Hey guys, thanks alot for the help.

Looks like the Proset is going to do the trick.

0
 
LVL 66

Expert Comment

by:johnb6767
ID: 20346382
Good to hear...
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Using in-flight Wi-Fi when you travel? Business travelers beware! In-flight Wi-Fi networks could rip the door right off your digital privacy portal. That’s no joke either, as it might also provide a convenient entrance for bad threat actors.
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
This Micro Tutorial will show you how to maximize your wireless card to its maximum capability. This will be demonstrated using Intel(R) Centrino(R) Wireless-N 2230 wireless card on Windows 8 operating system.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now