Diconneting wireless networks when connected to local domain

I need to make sure that my users are not connected to any wireless
networks when connected to my local wired network. I was hoping Group
Policy had a way to disable network adapters or maybe something else that
would get the job done. Any ideas?

My Domain Controllers are Windows Server 2003. My laptops are Windows XP
Pro SP2.

Thanks, Jason

crikan@nospam.postalias

Hi Jason,

Have you looked at the Wireless Policy Extension in Windows 2003 Server?

http://www.microsoft.com/technet/com...uy/cg0703.mspx

--
Eric Cross
Microsoft MVP - Networking
http://mvp.support.microsoft.com


<> wrote in message
news:...
>I need to make sure that my users are not connected to any wireless
> networks when connected to my local wired network. I was hoping Group
> Policy had a way to disable network adapters or maybe something else that
> would get the job done. Any ideas?
>
> My Domain Controllers are Windows Server 2003. My laptops are Windows XP
> Pro SP2.
>
> Thanks, Jason

Eric Cross [MVP]

The ability to block wireless access to machines connected to your domain is
not a feature of Wireless Group Policy. Currently this feature can
configure wireless settings for domain members on a per SSID basis but it
does not prohibit users from adding another wireless network to the list and
connecting to that network

--
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.
<> wrote in message
news:...
>I need to make sure that my users are not connected to any wireless
> networks when connected to my local wired network. I was hoping Group
> Policy had a way to disable network adapters or maybe something else that
> would get the job done. Any ideas?
>
> My Domain Controllers are Windows Server 2003. My laptops are Windows XP
> Pro SP2.
>
> Thanks, Jason

Jim Seifert [MSFT]

Thanks Jim, that's what I was afraid of.

Does anyone have any ideas of a script that could disable the wireless
network adapter when they login and then enable it when they logoff?


"Jim Seifert [MSFT]" <> wrote in
news::

> The ability to block wireless access to machines connected to your
> domain is not a feature of Wireless Group Policy. Currently this
> feature can configure wireless settings for domain members on a per
> SSID basis but it does not prohibit users from adding another wireless
> network to the list and connecting to that network
>

crikan@nospam.postalias

This is a tough one since there are a number of third party services and
applications that can be used for wireless connectivity and a few devices
that don't identify themselves as wireless to the OS. You could disable the
Windows Wireless Zero Configuration Service at login and then enable it at
login. "Net stop wzcsvc" then "Net start wzcsvc". This would prevent users
who are not local admins from using Windows wireless. This would not block
third party wireless nor would it prevent local administrators from starting
the service.

--
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.
<> wrote in message
news:...
> Thanks Jim, that's what I was afraid of.
>
> Does anyone have any ideas of a script that could disable the wireless
> network adapter when they login and then enable it when they logoff?
>
>
> "Jim Seifert [MSFT]" <> wrote in
> news::
>
>> The ability to block wireless access to machines connected to your
>> domain is not a feature of Wireless Group Policy. Currently this
>> feature can configure wireless settings for domain members on a per
>> SSID basis but it does not prohibit users from adding another wireless
>> network to the list and connecting to that network
>>
>

Jim Seifert [MSFT]