Windows wireless connection using 802.1x Radius not autoconnecting when settings are imported

JordanCNolan — Thu, 20 May 2021 22:08:43 GMT

Just about to switch all the users over to using 802.1X with custom RADIUS authentication from PSK (WPA2) but I am having a little trouble getting the clients to connect without any user intervention.

When I would setup the PSK (WPA2) SSIDs I would configure one of the computers and export the configuration using:

Netsh wlan export profile [“profile name”] [key=clear] folder=”C:\Temp”

Which would create the WiFi-NetworkName.xml then I would just create a script to run

Netsh wlan add profile filename=WiFi-NetworkName.xml user=all

After running the "add profile", clients would just connect automatically to the SSID. I am doing the same thing with the new 802.1x setup but the users still have to select the network once and click Connect even though I have the Windows Group setting set to include Domain Computers.

After I push down the wireless settings I can go to a computer at the Windows logon screen and click the Wireless option where I can see the SSID. I just have to click Connect and I am on. I just want to eliminate that step.

Here is the XML file used for Netsh wlan add:

<name>Secure-Emp</name>

<SSID>

<name>Secure-Emp</name>

</SSID>

<nonBroadcast>false</nonBroadcast>

</SSIDConfig>

<connectionMode>auto</connectionMode>

<autoSwitch>false</autoSwitch>

<MSM>

<authentication>WPA2</authentication>
<encryption>AES</encryption>
<useOneX>true</useOneX>

</authEncryption>

<Type xmlns="http://www.microsoft.com/provisioning/EapCommon">25</Type>
<VendorId xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorId>
<VendorType xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorType>
<AuthorId xmlns="http://www.microsoft.com/provisioning/EapCommon">0</AuthorId>

</EapMethod>

<DisableUserPromptForServerValidation>false</DisableUserPromptForServerValidation>

</ServerValidation>

<InnerEapOptional>false</InnerEapOptional>

<UseWinLogonCredentials>true</UseWinLogonCredentials>

</EapType>

</Eap>

<EnableQuarantineChecks>false</EnableQuarantineChecks>

<RequireCryptoBinding>false</RequireCryptoBinding>

<PerformServerValidation xmlns="http://www.microsoft.com/provisioning/MsPeapConnectionPropertiesV2">false</PerformServerValidation>

<AcceptServerName xmlns="http://www.microsoft.com/provisioning/MsPeapConnectionPropertiesV2">false</AcceptServerName>

</PeapExtensions>

</EapType>

</Eap>

</Config>

</EapHostConfig>

</EAPConfig>

</OneX>

</security>

</MSM>

</WLANProfile>

Re: Windows wireless connection using 802.1x Radius not autoconnecting when settings are imported

Philip D'Ath — Sat, 22 May 2021 00:32:55 GMT

Are these AD attached computers?

If so, use group policy. Much simpler.

Re: Windows wireless connection using 802.1x Radius not autoconnecting when settings are imported

JordanCNolan — Fri, 04 Jun 2021 18:23:17 GMT

Used the GPO method. It was a little bit of a pain getting all the settings correct, but it worked out better.

topic Re: Windows wireless connection using 802.1x Radius not autoconnecting when settings are imported in Wireless

Windows wireless connection using 802.1x Radius not autoconnecting when settings are imported

Re: Windows wireless connection using 802.1x Radius not autoconnecting when settings are imported

Re: Windows wireless connection using 802.1x Radius not autoconnecting when settings are imported