Unable to connect to Wireless profile being pushed using GPO

Today , some laptop users started reporting as they are unable to connect to ‘Wireless profile’ after SCEP installation has taken place. I found, most of the laptop users were having this issue. I immediately uninstalled SCEP but that didn’t help , tried removing Wi-Fi profiles under the path ‘C:\ProgramData\Microsoft\Wlansvc\Profiles\Interfaces\Interface’ but that didn’t help too.

Error- When checking event viewer, the only error that showed up is as follows 5 times in a row.
         “Error skipping EAP method DLL path name validation failed. Error: typeId=25, authorId=0,vendorId=0,vendorType=0”, This error indicates a registry or missing corrupt file issue.

EAPHost is a Microsoft Windows Networking component that provides an Extensible Authentication Protocol (EAP) infrastructure for the authentication of following protocols such as 802.1X and Point-to-Point(PPP).

Cause - Symantec didn’t uninstall properly caused this issue.

Resolution – After checking the Group Policy  ‘Wireless Network (IEEE 802.11) Policy’ offering all CRP Wi-Fi profiles , none of the profiles were listed as shown in the figure.
While checking the event viewer found above error, lead me to think that’s a registry issue. I immediately checked the registry path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\RasMan\PPP\EAP found Symantec .dll files were registered, I exported the EAP registry files from working machine and imported in to the affected machines , rebooted the system and it connected back to INCRP successfully.

Lesson learned – We have to rethink about our strategy to deploy SCEP (specifically on laptops) using client settings which uninstall the ‘Symantec  Client’ automatically but this method is not removing ‘Symantec Client’ completely leaving behind some registry files tied to Symantec. We need to have a package created  in SCCM, uninstall ‘Symantec Client’ Completely , let’s deploy it to laptop machines before we push SCEP Client settings in order to install SCEP.

References -   
1. https://social.technet.microsoft.com/Forums/windowsserver/en-US/e81ff332-8ba4-4a70-bbc7-763a7103f6dc/windows-wireless-profile-deleting-itself?forum=w7itpronetworking
2. https://social.technet.microsoft.com/Forums/en-US/f59ef79c-e699-46d7-bb49-7c5a5338a3cd/auto-add-wireless-profile?forum=mdt
3. http://www.edugeek.net/forums/windows-7/102466-windows-7-64bit-wireless-profile-disappears-but-gpo-stays.html
4. http://www.itexperience.net/2014/03/11/offering-wifi-profiles-as-a-gpo-preference-in-windows-7/
5. https://technet.microsoft.com/en-us/magazine/gg266419.aspx
6. http://securityxploded.com/wifi-password-secrets.php
7. http://windowssecrets.com/forums/showthread.php/159676-Error-event-2002-EAPHOST-amp-1-other

 

Comments

Popular posts from this blog

The install4j wizard could not find a Java Runtime Environment on your system. Please locate a suitable JRE...

Clients Unable to update - "Cached cookie has expired or new PID is available"

Java Control Panel Icon "Application Not Found"