Saturday, 22 June 2013

Removing corporate wireless restrictions completely : "The policies of your network prevent the creation of ad hoc (computer-to-computer) networks. For more information, contact your system administrator."

    So i was recently tasked with removing wireless restrictions from a VP's windows 7 laptop that some infrastructure company had placed while contracted with our network, since he needed to enable setting up of adhoc connections on his laptop and he always got

 "The policies of your network prevent the creation of ad hoc (computer-to-computer) networks. For more information, contact your system administrator."


A little bit of probing revealed that adhoc and peer to peer connections were blocked as evidenced by the the command 

netsh wlan show filter on an  elevated command prompt revealed that adhoc network type was blocked by group policy:

I removed the restrictions by:

1: open services.msc as administrator, scroll down to WLAN AutoConfig:



and stop the service for now.


2: Open regedit.exe as administrator and browse to
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Wireless\GPTWirelessPolicy]
back up the key and delete it, change the permissions on the Wireless folder above the GTPWirelessPolicy and take ownership of it and give full permissions only to yourself and administrators.

3: GO to the key:
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{OACDD4OC-75AC-47ab-BAAO- BF6DE7E7FE63}

and delete it, change the permissions on the GPExtensions key as well, giving ownership to yourself and administrators only.

4: Go to the folder
C:\Windows\wlansvc
and remove a .tmp file that contains wireless policy.
Change the permissions of the wlansvc folder to only give ownership and editing rights to yourself.

5: open services.msc and start WLAN AutoConfig
 You should be able to establish an adhoc network now and all your wireless related group policies will also be gone.






4 comments:

  1. Not able to delete OACDD4OC-75AC-47ab-BAAO- BF6DE7E7FE63....mentioned in step 3, plz help

    ReplyDelete
  2. I have the same error, cannot delete the key OACDD4OC-75AC-47ab-BAAO- BF6DE7E7FE63

    ReplyDelete
  3. Great! I used it to reverse at "prevent connection to adhoc network" in a domain GPO, worked fine. A little puxxle to keep settings for machine-authenticated wireless, though.

    On deleting reg-key OACDD4OC-75AC-47ab-B... I took ownership first and deleted after.
    mads.lomholt -hos- live.no

    ReplyDelete

Detect autopilot session

  Ensuring that some apps only install during autopilot is not easily accomplished, you can use the below powershell script as a requiremen...