• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1844
  • Last Modified:

Use Group Policy to block joining of certain Wireless SSID

Experts,

Is there a group policy or other method to stop clients from joining a certain wireless SSID, other than using the mac filtering (75+ laptops) on the AP or router?

We will be implimenting a guest access wireless SSID that will be used for internet only for non employees. We don't want the domain laptops to be able to join the guest access. This method should be the only restricting that can be done on the laptop because the wireless users would still need to beable to connect to other wireless access points like coffe shops and airports or at home.

Please let me know if there is a way to do this and how I would go about doing it.

Thank you!

0
cbossert
Asked:
cbossert
  • 2
2 Solutions
 
Henrik JohanssonSystems engineerCommented:
Place the non-employees in a group and configure remote access policy that grants access to that group.
http://technet.microsoft.com/en-us/library/cc783153.aspx
0
 
Darr247Commented:
I don't see how you can push/enforce the policy on non-employees unless they're connecting to your domain.

But using the instructions at that link you might be able to create a wireless access method with the SSID as a policy condition and then Deny access to the employee group.
0
 
cbossertAuthor Commented:
Darr,

How would I go about doing this I am not really following it. They would be non employees actually it would be patients and patients families connecting with their personal laptops. We don't want the nurses/social workers using this SSID because it will be unfiltered and not part of the domain network.  
0
 
Darr247Commented:
You would add the nurses/et al belonging to your domain to an 'Employees' group, then using the instructions on the page linked to by henjoh09, create a policy object for the Wireless Access method (see that tutorial), with the SSID as a policy condition (again, see the tutorial), then set the permissions for the Employees group to Deny instead of Allow (tutorial).

Creating a policy object for the non-employees would not help, as they're not part of your domain, ergo would never get the policy pushed to them, ergo the policy would not affect them.
0

Featured Post

Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now