General discussion

  • Creator
    Topic
  • #2285321

    Disable Wireless Card Installation

    Locked

    by kittypshah ·

    Does anybody know how I can stop a user installing a wireless card in his/her laptop either by registry hack or group policy settings. I also need to disable existing cards that are installed.

All Comments

  • Author
    Replies
    • #3312755

      Epoxy

      by stress junkie ·

      In reply to Disable Wireless Card Installation

      Forget the Registry. Here is a simple solution.

      You could get a piece of plastic the size of a PCMCIA card and use epoxy to glue the plastic into the PCMCIA slot. Simple. Permanent. Unambiguous.

      You can also do the same thing with desktop computers with the USB slots. Using a USB connector that is not connected to a wire would stop people from plugging USB devices into computers in work. You’d have to use PS/2 style keyboard and mouse of course.

      • #3254812

        LOL…..

        by carlitosway ·

        In reply to Epoxy

        Direct and to the point! lol I think I’ll try this on future deployments 😉

    • #3351403

      Reply To: Disable Wireless Card Installation

      by lcomtois ·

      In reply to Disable Wireless Card Installation

      Did you find how to disable wireless cards? I am looking for the same info!

      • #3350819

        To disable…

        by mtrox ·

        In reply to Reply To: Disable Wireless Card Installation

        To disable, right click on My Computer> Properties> Hardware tab> Device Manager, then click the plus sign by Network Cards, then right click on the wireless card, then click on disable.

        Plus, many modern laptops have a switch somewhere that turns off the wireless. Not sure what you?re trying to accomplish but it?s also not hard to take the wireless card out, even if it?s built in.

        • #3346985

          Reply To: Disable Wireless Card Installation

          by lcomtois ·

          In reply to To disable…

          What I am looking fore is a way to disable any wireless network cards while connected to the corporate Network. I need a command a script or best of all a GPO.

          Removing the card or manually disabling the card is not an option, I need to be able to do it remotely.

        • #3335760

          I’ll catch up….

          by mtrox ·

          In reply to Reply To: Disable Wireless Card Installation

          Sorry lcomtois, thought that question was a little basic for this board. I was so happy I knew the answer to something I just jumped in.

          ‘fraid I can’t help you with that one. I’m just happy when I just get one of my little logon scripts to work.

    • #3351924

      Possible solution….

      by cp7212 ·

      In reply to Disable Wireless Card Installation

      I’m not quite sure of your architecture, but do you currently use a WEP or WPA key? It wouldn’t be hard to change it if someone got a hold of it. It’s not uncommon to use “cycling” WEPs, where they are changed every sixty days.

      You could email the WEP to your users that need it or if you really wanted to do it securely, have them bring you the laptops and do it yourself. Inform them that this is the only way they will be able to access the network wirelessly.

      The ones that you don’t want on your network, don’t install the WEP or WPA. Changing the WEP would only take a couple of minutes per laptop.

    • #3325536

      an idea

      by imamember ·

      In reply to Disable Wireless Card Installation

      What about using the MAC filtering capabilities of the wireless access point(s)? It could be a lot of work because you’d have to gather each users MAC address (from their wireless NIC) and then input it to the router, as a device to block. It may be less work to input only MAC addresses you want to allow … depends on # of users and other security configuration issues.

      I’m sure there are other ways to tackle this problem but I think using the MACs may be agood approach because it saves you having to worry about whether the cards are present or not.

      • #3247420

        Agree

        by jmgarvin ·

        In reply to an idea

        MAC filtering is probably the best way. You could also setup RADIUS authentication.

        • #2612088

          Many also offer ….

          by naughtymonkey ·

          In reply to Agree

          a list of MACs connected and their IP addresses. You could compare the IP to DNS to get the MAC so you wouldn’t have to go look at everyones computer. Then again you could always script that.

    • #3248964

      Disabling Wireless card in Registry

      by niksutcliffe ·

      In reply to Disable Wireless Card Installation

      You need to go to this registry key

      HKLM\SYSTEM\CurrentControlSet\Hardware Profiles\Current\System\CurrentControlSet\Enum\PCI\*****\0000\CSConfigFlags

      The ***** refers to your Wireless cards Hardware ID, if you don’t know this then look in device manager and then under the cards details tab,the dword value is 0 for disabled and 1 is for enabled. You need to reboot the machine for the changes to take effect.

      • #3248874

        Disabling Wireless card in registry

        by blackg ·

        In reply to Disabling Wireless card in Registry

        Anyone know of a way to disable the wirelss NIC if the wired NIC is active via a policy? we currently have a group policy that disables the XP firewall when you are on the domain and enables it as soon as you pull out the network cable. Our security people are concerned about rogue/spoofing of a wireless AP that connects tot he wireless NIC while the wired NIC is on the network. (At this time we do not have wireless access at the office).

        Thanks

        • #3246329

          Reply To: Disable Wireless Card Installation

          by lcomtois ·

          In reply to Disabling Wireless card in registry

          This is exactly what we are looking for:
          A way to disable wireless network card while connected to the physical company network.

      • #2612089

        Don’t see the options

        by cmaclean ·

        In reply to Disabling Wireless card in Registry

        I get to
        HKLM\SYSTEM\CurrentControlSet\Hardware Profiles\Current\System\CurrentControlSet\Enum\PCI\***** but after the hardware I don’t see anymore options

    • #3241929

      I have a solution !

      by lcomtois ·

      In reply to Disable Wireless Card Installation

      If you look in the registry under :
      KEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}

      You get all your network connections. Now under each one you have ?connection? and under that you have 2 key you need ?MediaSubType? and ?PnpInstanceID?.
      IF MediaSubType is 2 then this is a wireless network card.

      Now that we can find the wireless card we need a way to disable them. Microsoft has a nice application called DEVCON that is used to manage devices from the command prompt. To disable a card you just do this:
      Devcon disable ?@PnpInstanceID?

      Here is a little vbscript I wrote to disable the wireless cards:
      **************** VB script *******************
      Const HKEY_LOCAL_MACHINE = &H80000002

      Public WShell

      strComputer = “.”

      Set WShell = Wscript.CreateObject(“Wscript.Shell”)
      Set oReg=GetObject(“winmgmts:{impersonationLevel=impersonate}!\\” & _
      strComputer & “\root\default:StdRegProv”)

      strKeyPath = “SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}”
      oReg.EnumKey HKEY_LOCAL_MACHINE, strKeyPath, arrSubKeys

      For Each subkey In arrSubKeys
      If subkey <> “Descriptions” Then
      Wscript.Echo strKeyPath & “\” & subkey & “\” & “Connection”
      strValueName = “MediaSubType”
      oReg.GetDWORDValue HKEY_LOCAL_MACHINE,strKeyPath & “\” & subkey & “\” & “Connection” ,strValueName,dwvalue

      strValueName = “Name”
      oReg.GetStringValue HKEY_LOCAL_MACHINE,strKeyPath & “\” & subkey & “\” & “Connection” ,strValueName,strValue
      Wscript.Echo “Card: ” & strValue

      If dwvalue = 2 Then
      strValueName = “Name”
      oReg.GetStringValue HKEY_LOCAL_MACHINE,strKeyPath & “\” & subkey & “\” & “Connection” ,strValueName,strValue
      Wscript.Echo “This is a wireless card will be disabled: ” & strValue

      strValueName = “PnpInstanceID”
      oReg.GetStringValue HKEY_LOCAL_MACHINE,strKeyPath & “\” & subkey & “\” & “Connection” ,strValueName,strValue
      wShell.Run “devcon disable “”@” & strValue & “””” ,2,true
      End If
      End If
      Next
      *****************End of Script ***************
      Note: for this script to work you need devcon.exe in one of you system folder (like c:\windows\system32)

      • #3239201

        Or try a signal jammer?

        by kawarimi ·

        In reply to I have a solution !

        I did visited some college and University that have signal jammer in classroom and auditorium, it starts to jam the signal when there is an exam in progress to prevent students cheating via mobil phones and prevent interrupt on the presentation, It could jam 802.1x device signal as well.
        Since I don’t know the exact model they use but here is some reference link u might to have a look :
        http://www.netline.co.il/Netline/

      • #3045817

        Only when wired is active?

        by cbaser ·

        In reply to I have a solution !

        Does this solution work only when a wired connection is active? I want the wireless adapters disabled only when a wired connection is detected. AirDefense Personal does this (plus many other things) but is cost prohibitive on thousands of clients. Thanks!

        • #3152338

          Any luck?

          by isax242 ·

          In reply to Only when wired is active?

          This is exactly what we need to do. I know it’s an old topic, but did you find a solution?

Viewing 5 reply threads