Microsoft is deploying a new feature, WiFi Sense, which provides users a way to easily share passwords to wireless networks with all of their contacts. This introduces a new security failure mode: a user might decide to share a wifi network password that maybe they shouldn't have. All it takes one user to share the wifi network with their contacts, and now others who might not be authorized might gain access to the network.
What options are available to a network administrator who wants to ensure that their wireless network's password can't be shared through WiFi Sense?
Here's what I've found. Microsoft says you can prevent a wifi network's password from being shared by adding
_optout to the network SSID. Also, it sounds like networks that use 802x EAP might be immune (is this true?). Are there any other methods?