Controller Based WLANs

Wireless on Microsoft Windows machines can be configured for 802.1x where a user inputs credentials to gain access to the network. Microsoft Windows caches these credentials for an easy connection the next time that secure wireless network is connected. This works well, except for multi-user machines where many users share the same profile. The next time a connection is made to the wireless network, it uses the same credentials that the last user entered, which is not secure.

How to fix:

Microsoft Windows caches the last user credentials (encrypted) in the registry key:

[HKEY_CURRENT_USER\Software\Microsoft\Eapol\UserEap Info]

When this key is removed, a user must enter credentials each time. To make this happen, copy and paste this text into a file and name it RemoveEAP.reg:

----------------snip
REGEDIT4

[-HKEY_CURRENT_USER\Software\Microsoft\Eapol\UserEap Info]
-----------------snip

Next, run the command regedit /s RemoveEAP.reg and the user credentials are removed.

If you put this command under c:\documents and settings\all users\program files\startup, it runs every time a user logs in. The user credentials are cleared every time.