Wifi profile/password issue

SteveLord

Our wifi password here changes every 60 days. The issue I have with this is having to manually change it across many laptops and mobile devices. Users never remember how to do it. And the devices never tell you "your password is suddenly wrong, enter correct one" it just won't work unless you go into the profile in Windows 7 or you Forget/Re-Add the wifi on an iPad.

Thankfully, Meraki (MDM product) lets me manage the Wifi profile of my iPads which it then pushes out. Those users receive that info prior to the meeting via their home or hotel internet. So I have that piece fixed. I would like to be able to do something similar with Windows 7 laptops.

Is there a product out there that would let me centrally manage this? Thanks.

crrussell3

You can script this via GPO or Systems Management Solution of your choice:

First, create the proper SSID/Passphrase on a test laptop and run the following:

REM Export SSID with passphrase into xml
netsh wlan export profile name="YOUR_SSID.xml"

REM Delete existing profile
netsh delete profile name="YOUR_SSID"

REM Import new profile with correct passphrase
netsh wlan add profile filename="path to xml from first step"

SteveLord

Can you elaborate? Note that none of these laptops connect to our primary network if that is what you're getting at. They are all standalone. The wifi is separate from the primary network and is essentially for mobile devices/guests.

crrussell3

Ahh yes. That solution would only work if the laptops were connected to the network/domain for it to happen. You would just make those code snippets two bat files to make them work.

Not sure how you can manage them with them being off the network/domain easily.

SteveLord

Probably need another cloud solution. All of them do connrect to our Citrix Sharefile account. So even if I had to deliver a batch file and ask them to run it, that might work.

NightShade1

If you got budget...
What you need is a solution like aruba Clearpass....

thehourman

I was testing WiFi EAP-TLS using Cisco ISE. What I did was, I created a GPO on my AD server then push this policy to all my test laptops. Therefore, the user does not need to manually install the Wifi profile. You should be able to do the same thing on your network either you use PSK or 802.1X.