Can I setup and enforce additional WiFi connection (and password) requirements on managed laptops using Windows or MacOS?

Such as:

  • blocking (or entirely hiding) the option to connect to open networks
  • blocking (or entirely hiding) networks that use weak protocols such as WEP or WPA
  • only allowing connection to WPA2/WPA3 networks if the password meets certain requirements such as minimum length, certain characters or strength, no simple passwords with repeated characters, not on password block lists?
  • using allow or deny lists for access point mac addresses?
  • using allow or deny lists of ssid names?
  • "what are other common restrictions that can be applied" is a little too open-ended. What problem do you want to solve?
    – schroeder
    Nov 20 at 13:47
  • Removed that part. Preventing users from connecting to 'very' insecure networks and/or warn them if they do or did. On semi-managed employee devices, ideally only allow connecting to their home and office WiFi networks if some requirements are met.
    – Bob Ortiz
    Nov 20 at 14:18
  • "Managed" how? Active Directory and GPOs? I'm thinking this is more of a ServerFault question because it will likely end up as a configuration question. The answer to "can you?" is 'yes'. But then you'll want to know "how?"
    – schroeder
    Nov 20 at 14:32
  • For example: community.spiceworks.com/topic/… I googled for "gpo [insert your bullet point]"
    – schroeder
    Nov 20 at 14:34
  • So group policies are the only, and the best option for Windows? How about for MacOS? My question is broader than that, as the bullet points try to reflect. Also, how should this be managed (enrolled, enforced, monitored) cross-devices in a scalable way?
    – Bob Ortiz
    Nov 20 at 15:13


You must log in to answer this question.

Browse other questions tagged .