Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

WLAN Profile Config on Endhost

Hi All,

If we want to use SSID with WPA2 security (802.1x) for example, my understanding is we have to create WLAN profile in each and every user's laptop.

But it is not possible to do in a big organization. So is there any possibility to automate that..? Self provisioning ..?

Thanks in advance


WLAN Profile Config on Endhost

Hi Prasan,

Yes, the wireless settings on every laptop needs to be configured.

To make this easy, from the Active Directory you can push a GP update.

This is used to configure the wireless settings on the laptop.

( Ex : Authntication type, Encryption type , Certificate Validation )

Please refer :

Ease of management is one advantage. The main benefit through the Group Policy update, the administrator can have a better control over the wireless network. The options for the end user will be pre-configured and grayed out. The end user cannot edit the settings.

You can alos defive preferred networks and deploy certificates using a Group Policy.




Regards Victor V *****Help out other by using the rating system and marking answered questions as *****Answered"*****
New Member

WLAN Profile Config on Endhost

Hi Victor ,

What you have suggested is only for windows clients . In few case , What if my users bring their own laptops having OS part from windows . Is there an option to push GPO for non windows clients also ? Or Is it possible to do from ISE through self provisiong of WLAN configuation ...

Thanks ,


VIP Purple

WLAN Profile Config on Endhost

HI Vijay,

You can only push the WLAN profile to domain PC via GPO.

But via NEtsh tool you can  you can push wlan priofile to non domain....:

Check here:

Hoipe it helps.


Dont forget to rate helpful posts

Hall of Fame Super Silver

Re: WLAN Profile Config on Endhost

Self registration is the way to go with ISE. You need to define your security policies better. You need to have one that profiles your company owned assets and non company owned assets. If users being in their own devices, you really trusting them that they don't have any viruses or malware? Many organizations will have these devices go onto the guest network. You can't push any profile using 802.1x to end devices because they don't have credentials unless your going to allow them to login with their own AD credentials on a non company owned machine. Apple machines it's a manual process, windows you can import but you have to build a profile for xp, win 7 and win 8 and explain how to upload it.

Self registration is your best option here.

Sent from Cisco Technical Support iPhone App

*** Please rate helpful posts ***
CreatePlease login to create content