Does anyone know of a way to suppress the wireless card when a wired connection is enabled? I know there are 3rd party products that do this, but I am looking for a way to manipulate windows via GPO or registry setting to do this. The issue is we do not want users connected via wired connection to the trusted network, and able to jump on the guest access at the same time, thereby circumventing the firewall.
ON some wireless cards like Dell which is a broadcom chipset you do select "Disable Upon Wired Connect" property for the card via Device Manager-->Network Adapters-->Dell TrueMobile-->Properties-->Advanced tab or here is a work in progress VBScript I found at Experts Exchange in 2005. Const HKEY_LOCAL_MACHINE = &H80000002 Public WShell strComputer = "." Set WShell = Wscript.CreateObject("Wscript.Shell") Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & _ strComputer & "\root\default:StdRegProv") strKeyPath = "SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}" oReg.EnumKey HKEY_LOCAL_MACHINE, strKeyPath, arrSubKeys For Each subkey In arrSubKeys If subkey <> "Descriptions" Then Wscript.Echo strKeyPath & "\" & subkey & "\" & "Connection" strValueName = "MediaSubType" oReg.GetDWORDValue HKEY_LOCAL_MACHINE,strKeyPath & "\" & subkey & "\" & "Connection" ,strValueName,dwvalue strValueName = "Name" oReg.GetStringValue HKEY_LOCAL_MACHINE,strKeyPath & "\" & subkey & "\" & "Connection" ,strValueName,strValue Wscript.Echo "Card: " & strValue If dwvalue = 2 Then strValueName = "Name" oReg.GetStringValue HKEY_LOCAL_MACHINE,strKeyPath & "\" & subkey & "\" & "Connection" ,strValueName,strValue Wscript.Echo "This is a wireless card will be disabled: " & strValue strValueName = "PnpInstanceID" oReg.GetStringValue HKEY_LOCAL_MACHINE,strKeyPath & "\" & subkey & "\" & "Connection" ,strValueName,strValue wShell.Run "devcon disable ""@" & strValue & """" ,2,true End If End If Next The finished product will be at Welcome to Petri.co.il by Daniel Petri
Couldn't you simply create a second device profile, and disable the wireles card in the second profile? That way you can switch back and forth easily. -Jay
Jay, I could do that, but trying to automate the process for users. Also, that would require a reboot. Basically want to prevent users from being on the trusted LAN (wired) and guest network (wireless) at the same time. Thanks
