This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hi All,
How can I disable the "View Wi-Fi Security Key" option for end-user devices through Intune? Deleting the registry key HKEY_CLASSES_ROOT\AppID{86F80216-5DD6-4F43-953B-35EF40A35AEE} only encrypts the password from Advanced Wi-Fi Network properties. Here's an image of the option I'm referring to:
Hey, Thanks, is there any way where we can restrict this view option to end-user devices? Thanks ZB
@Pavel yannara Mirochnitchenko How to remove admin rights for those users from Intune? because I have 500+ users in the Azure active directory. Thanks ZB
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 91%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESA%3C/text%3E%3C/svg%3E)
@Zeeshan Bute I don't know if you've found a solution since, but using the following article as an example: https://learn.microsoft.com/en-ie/answers/questions/1633038/windows-11-23h2-view-wi-fi-security-key
I have created a Powershell script that modifies the permissions of this button to pop-up a UNC :
# If not present, create PSDrive "HKCR"
New-PSDrive -Name "HKCR" -PSProvider Registry -Root "HKEY_CLASSES_ROOT" -ErrorAction SilentlyContinue
# Path of the register key
$registryPath = "HKCR:\AppID\{86F80216-5DD6-4F43-953B-35EF40A35AEE}"
# Get ACL of the register key
$acl = Get-Acl -Path $registryPath
# Remove all the rules
$acl.SetAccessRuleProtection($true, $false)
$acl.Access | ForEach-Object { $acl.RemoveAccessRule($_) }
# Add the group "SYSTEM"
$groups = "SYSTEM"
# Create an ACL for the group "SYSTEM"
$permission = $groups, "FullControl", "Allow"
$accessRule = New-Object System.Security.AccessControl.RegistryAccessRule($permission)
# Set ACL for rules
$acl.SetAccessRule($accessRule)
# Add group "Administrateur" as Owner
$acl.SetOwner([System.Security.Principal.NTAccount]"Administrators")
# Set ACL
Set-Acl -Path $registryPath -AclObject $acl
@Safak AYDIN Hi,
Thanks for your consideration on this.
Could you please guide me more with your PowerShell script? and how I will perform and also if you can help with the steps to deploy this script.
Thanks
ZB
I therefore remove all the defined groups and simply leave the "SYSTEM" group (top right on Windows).
As a result, only administrator accounts will have the right to read the Wifi password,
If you don't have such a system, I recommend either creating a GPO for deployment, or deploying via psexec or PDQ Deploy, which offers 2 weeks' free use.
@Zeeshan Bute you can use my script: https://github.com/yannara/Intune/blob/main/RemoveLocalAdmin.ps1 Assign it to users.
This is very interesting finding. We don't use certificate based Wifi anymore, but pre-shared password is stored in Intune policy. I didn't know that it can be viewed from Windows. But, good news is that viewing the password requires admin rights, so we are partly safe from that :)
@Zeeshan Bute by removing local admin rights from users for sure :)