The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Hi,

  What you suggest makes a lot of sense. eduroam credentials are personal therefore should be restricted to the current user. Besides the installed root CA will be limited to the the current user anyway, so the profile should not work for others. It would seem that adding user=current to netsh should be safe for everyone, but surely we should run quite a bit of testing before making this change.

On the other hand, we imagined that in a managed Windows environment the network provisioning would be done centrally anyway, this is probably why we never got this request before.

Tomasz Wolniewicz

W dniu 10.01.2019 o 20:10, Johnson, Christopher pisze:

Good Afternoon,

 

We’re just starting to make use of the eduroamCAT utility and ran into an issue. Wasn’t sure if this was right place to report problem/request?

 

I wanted to inquire if additional logic could be built into the CAT utility to create the eduroam profile as a “User” profile instead of “All User Profiles”? This is to help end-users in Windows 10 that have managed machines where the “createalluserprofile” flag is globally set to disabled via group policy (default in GPO apparently after consulting with GPO admin). When the utility is ran with this flag set to disabled, the profile installation will fail when “netsh wlan add profile **** xml” is ran.

 

Looking at the switches/format the “netsh wlan add profile commands”, if “user=current” was added – this would get around the issue.

 

Netsh wlan show createalluserprofile – shows current state of this flag.

 

Administrator Privileges - netsh wlan set profile createalluserprofile enabled=yes/no – can be used to reproduce this problem on a home/personal machine.

 

Screen shot with example below: createalluserprofile is set to “disabled”. By attempting to perform a “netsh wlan add profile wlan_prof-0.xml” – errors out due to “You do not have the permission to add profile “eduroam” for all users”. If I append “user=current” to the netsh command – the profile is installed successfully.

 

 

Output of inst_cat.cmd when eduroamCAT is ran:

 

 

Christopher Johnson

Wireless Network Engineer

AT Infrastructure Operations & Networking (ION)

Illinois State University

(309) 438-8444

Stay connected with ISU IT news and tips with @ISU IT Help on Facebook and Twitter

 

 

 

 

To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users

-- 
Tomasz Wolniewicz    
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.: +48-693-032-576