Command-Line Configuration
Windows Vista and Windows Server 2008 support a command-line interface that allows you to configure the wireless settings that are available from the wireless dialog boxes in the Network Connections folder or through the Wireless Network (IEEE 802.11) Policies Group Policy extension. Command-line configuration of wireless settings can help deployment of wireless networks in the following situations:
- Automated script support for wireless settings without using Group Policy: The Wireless Network (IEEE 802.11) Policies Group Policy extension applies only in an Active Directory domain. For an environment without a Group Policy infrastructure, a script that automates the configuration of wireless connections can be run either manually or automatically, such as part of the logon script.
- Bootstrap of a wireless client onto the organization's protected wireless network A wireless client computer that is not a member of the domain cannot connect to the organization's protected wireless network. Additionally, a computer cannot join the domain until it has successfully connected to the organization's protected wireless network. A command-line script provides a method to connect to the organization's secure wireless network to join the domain.
To perform command-line configuration of Windows Vista- and Windows Server 2008- based wireless clients, run the netsh wlan command with the appropriate parameters. For more information about netsh wlan command syntax.
XML-Based Wireless Profiles
To simplify command-line configuration of wireless clients, you can export the configuration of a wireless profile to an XML file that can be imported on other wireless clients. You can export a wireless profile from a wireless client by running the netsh wlan export profile command or by using the General tab of the Windows Vista wireless policy properties dialog box. To import a wireless profile, run netsh wlan add profile.
Design Choices for Wireless Clients
The design choices for wireless clients are the following:
- To prevent your Windows Vista or Windows Server 2008 wireless clients from connecting to certain wireless networks, configure a list of denied wireless networks on the Network Permissions tab of the Windows Vista wireless policy properties dialog box, or run the netsh wlan add filter command.
- To configure your Windows Vista or Windows Server 2008 wireless clients to connect to only specific wireless networks, configure a list of allowed wireless networks on the Network Permissions tab of the Windows Vista wireless policy dialog box, or run the netsh wlan add filter command.
Requirements for Wireless Clients
The requirements for wireless clients are the following:
- To use WPA2, wireless clients must be running Windows XP with SP2 and the Wireless Client Update for Windows XP with Service Pack 2, Windows Vista, or Windows Server 2008.
- Command-line configuration using the netsh wlan command, export and import of wireless XML profiles, and Single Sign On are supported by wireless clients running only Windows Vista or Windows Server 2008.
Uses for Wireless Clients
Best practices for wireless clients are the following:
- For a small number of wireless clients, configure each wireless client manually.
- For enterprise deployment of wireless configuration in an Active Directory environment, use the Wireless Network (IEEE 802.11) Wireless Policies Group Policy extension.
- For enterprise deployment of wireless configuration through the use of scripts, create wireless XML profiles and configure wireless clients with a script containing the netsh wlan add profile command.
In this tutorial:
- IEEE 802.11 Wireless Networks
- Support for IEEE 802.11 Standards
- Wireless Security
- WPA
- Planning and Design Considerations
- Wireless Authentication Modes
- Intranet Infrastructure
- Wireless AP Placement
- Authentication Infrastructure
- Wireless Clients
- Windows Vista Wireless Policy
- Windows XP Wireless Policy
- Command-Line Configuration
- PKI
- 802.1X Enforcement with NAP
- Deploying Protected Wireless Access
- Configuring Active Directory for Accounts and Groups
- Deploying Wireless APs
- Configuring Wireless Clients
- Configuring and Deploying Wireless Profiles
- Maintenance for a Protected Wireless
- Troubleshooting Wireless Connections
- Network Diagnostics Framework Support for Wireless Connections
- Wireless Diagnostics Tracing
- NPS Event Logging
- Troubleshooting the Windows Wireless Client
- Troubleshooting the Wireless AP
- Common Wireless AP Problems
- Troubleshooting the Authentication Infrastructure
- Troubleshooting Certificate-Based Validation
- Troubleshooting Password-Based Validation