Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 416
  • Last Modified:

How do I push software to 7/XP wireless clients through a GPO?

Hello,

We are running Windows 7 and XP clients in a Windows 2003/2008 environment, using IAS for wireless authentication. When attempting to push down software through a GPO, the installation never works on the wireless clients, probably due to authentication timing issues. Is there a way to delay the logon so that the wireless clients can pick up to GPO? I was told that there was a .DLL that could do this. Is anyone aware of it?
0
srfergus
Asked:
srfergus
1 Solution
 
ded9Commented:
Hi,

Check this article

http://www.experts-exchange.com/Networking/Wireless/Q_22835801.html

Should resolve your problem.


Ded9
0
 
kylerabeCommented:
You need to have the clients logging into the wireless network as they are logging into the computer/domain.  Somtimes this requires the use of software from your wireless card's manufacturer (Intel ProSet Wireless), but can usually be done in Windows 7 using single sign on.  Go to the Network and Sharing Center and click Manage wireless networks.  Right click on your office's wireless network and click Properties.  On the Security tab, click Advanced Settings.  You should see an option to enable single sign on.  You want to perform it immediately before logon. If each employee has different credentials for the wireless network, you also need to allow additional dialogs to be displayed during single sign on.  When you reboot your machine you should see not only a form for your domain username and password, but also your wireless credentials.  
0
 
kylerabeCommented:
more information about Intel ProSet can be found here: http://www.intel.com/support/wireless/wlan/sb/CS-014563.htm
0
 
jimmernetCommented:
You need to set a GPO called "wait for network" It's somewhere buried in the computer configuration area. This does not let the login process continue until the network (wireless in this case) is established. Without this setting, the users are effectively logging on using cached credentials.

Also There are some settings in GPO for wireless to allow the computer itself to authenticate to the wireless AP/ domain instead of a user. This is useful if a user has not logged onto a wireless connected laptop before... See this...

http://technet.microsoft.com/en-us/library/cc778073%28WS.10%29.aspx

(....To specify that client computers attempt authentication to the network if a user is not logged on, select the Authenticate as computer when computer information is available check box, and in Computer authentication, click an option to specify how the computer should attempt authentication. For information about each of the options that you can select for Computer authentication, see Notes.)


if you cannot see the wireless configuration section in the machine area of the GPO, you may need to register the DLLs (I think this what you were thinkig..)

From http://www.winserverkb.com/Uwe/Forum.aspx/windows-group-policy/4223/Wireless-Group-Policy-Option-Missing

That's not entirely true. Some background: Wireless policy editing was added
to Server 2003 and requires a 2003 AD schema to work. XP, Sp1 and above is
capable of *processing* wireless policy but you're correct to say that, by
default, if you open the GP editor on an XP box you won't see Wireless
policy even if you're focused on a 2003 AD-based GPO. However, I played
around with this a bit and it looks fairly easy to rectify that. Simply copy
the following two files from the system32 folder on a Server 2003 system to
your XP workstation's system32 folder:

wlsnp.dll
wlstore.dll

and then on the XP box, register the wireless MMC snap-in by issuing the
following command from the system32 directory:

regsvr32 wlsnp.dll

That should allow you to edit Wireless policy on your XP box. Let me know if
that doesn't work for you.


Hopefully that will sort you out. Been there and had this issue!


0
 
srfergusAuthor Commented:
Thanks!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Building an Effective Phishing Protection Program

Join Director of Product Management Todd OBoyle on April 26th as he covers the key elements of a phishing protection program. Whether you’re an old hat at phishing education or considering starting a program -- we'll discuss critical components that should be in any program.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now