Need Batch or PowerShell script

Question

Need Batch or PowerShell script

TechUST 601

Hi Expert,

I am upgrading the machine to Win11 23H2 in our environment using the in-place upgrade method, but after the upgrade, it's not connecting to the corporate Wi-Fi. I also checked that the machine is patched with the latest month's updates. So now, can you provide a script that forgets the corporate Wi-Fi connection? Ideally, it should be some kind of login script that runs only once when a user logs into Win11 after upgrading. Also, would request please test script in your test environment.

Corey 71 Reputation points

2024-03-22T16:22:33.65+00:00

I understand you're looking for a script to forget the wifi but what is the actual issue? Is it possible that Credential Guard in Windows 11 is causing your issue? Perhaps you were using NTLM/MSCHAP and need to switch to EAP-TLS in your wifi profile deployment?

2 answers

Your answer

Corey 71 Reputation points

2024-03-22T16:22:33.65+00:00

I understand you're looking for a script to forget the wifi but what is the actual issue? Is it possible that Credential Guard in Windows 11 is causing your issue? Perhaps you were using NTLM/MSCHAP and need to switch to EAP-TLS in your wifi profile deployment?

Answer 1

AlexZhu-MSFT 6,591 Moderator

Hi,

Sure, you can clear the wifi profile using .bat or .ps1 through GPO. If we use the batch file, only a single command line is required.

netsh wlan delete profile name=<wifi_name>

gpo

editgpo

strrtup

script

Regards,

Alex

TechUST 601 Reputation points

2024-03-21T03:53:49.03+00:00

Hi Alex, thanks for replying , i need script which can fires only once when user login after win11 upgrade 1st time. I think The command will trigger every time. This will not help to achieve my goal.
Corey 71 Reputation points

2024-03-22T16:24:09.9066667+00:00

Perhaps this would work if you added the command to the user's RunOnce registry key?

Answer 2

AlexZhu-MSFT 6,591 Moderator

Hi TechUST,

If you prefer the script run only once, you can use the script below:

$file_result = "c:\even_run.txt" 

if (test-path $file_result) 
    { 
        write-host "$file_result exists. ignored!" 
    } 
else 
    { 
        $command = 'netsh wlan delete profile name=actual_wifi_name' 
        invoke-expression $command 
        $str1 = "anything you want to put here" 
        add-content -path $file_result -value $str1 
        write-host "wlan profile removed!" 
    }

Regards,

Alex Zhu

TechUST 601 Reputation points

2024-03-21T18:10:35.24+00:00
Hi Alex

I have tried running the script provided by you, but I am encountering an error stating 'You do not have sufficient privileges or the profile "Corpwifi" on interface is on group policy'. A text file is being created, and 'Write-host' just said it's completed. If there is an error, 'Write-host completed' should not be displayed. However, when I run 'netsh wlan delete profile name="Corpwifi", it works fine, so I believe this is not a privilege or GPO issue. Please let me know one more thing should I keep only this path "$file_result = "c:\Wifi_Forget.txt" or i can change to anywhere like Userprofile\Wifi_Forget.txt"

My goal is to forget the Corp wifi only once

I would request you to please review the script once again and test it in your test environment if possible, and share. It would be a great help.

$file_result = "c:\Wifi_Forget.txt"

if (Test-Path $file_result) {

Write-Host "$file_result exists. ignored!"

} else {

$command = 'netsh wlan delete profile name=Corpwifi' Invoke-Expression $command $str1 = "corp Wifi forgotten" Add-Content -Path $file_result -Value $str1 Write-Host "wlan profile removed!"

}
TechUST 601 Reputation points

2024-03-21T18:11:41.59+00:00

It would be big help if you could modify the script as per my need because i am beginner with scripting.
AlexZhu-MSFT 6,591 Reputation points Moderator

2024-03-22T01:29:50.5066667+00:00

Hi,

Which user context is used when testing the script? For start-up scripts, it is run under "SYSTEM" context. If we want to test the script, you cannot use the current logged on user. Please follow the below steps to test:

1, download PSTools

2, execute 'psexec -s -i powershell.exe', which should open a new window

3, in the new window, go to the script folder, try './remove_wlan_profile_only_once.ps1'

Note: no script can run in all environments, and I cannot simulate all your conditions in my lab.

Regards,

Alex
TechUST 601 Reputation points

2024-03-22T03:13:33.3233333+00:00

Hi Alex, trying to test run as admin manually first. And getting the same error
AlexZhu-MSFT 6,591 Reputation points Moderator

2024-03-22T07:46:13.7533333+00:00

Hi TechUST,

Every environment differs and we cannot probe the problem in your real environment.

As stated above, it is NOT correct to use any logon user to test the startup script. To test the script and solve the problem appeared, you need to use PSExec.exe as mentioned above.

Please provide the screenshots for any problems that occur during testing with PSExec.exe, so that we can continue troubleshooting. Thanks.

Regards,

Alex

TechUST 601

The script I have is currently running manually. Can i deploy the script through SCCM? Meaning, if the machine is connected to the same Wi-Fi profile, will it execute through SCCM, or do I need to deploy it through GPO? please suggest

$flagFile = "$env:TEMP\CorpWifiForget.log"

if (-not (Test-Path $flagFile)) {

# Check if any Wi-Fi profile contains "Corp"

$profileExists = netsh wlan show profiles | Select-String 'Corp'



if ($profileExists) {

    # Forget Wi-Fi profiles containing "Corp"

    netsh wlan delete profile name=*Corp* | Out-Null

    Write-Output 'Wi-Fi profiles containing "Corp" have been forgotten.'

}

else {

    Write-Output 'No Wi-Fi profiles containing "Corp" found.'

}

# Create a flag file to indicate that the script has been executed

New-Item -ItemType File -Path $flagFile -Force
```}

else {

```json
Write-Output 'Script has already been executed. Wi-Fi profiles containing "Corp" have already been forgotten.'
```}

TechUST 601 Reputation points

2024-03-27T13:35:09.29+00:00

Please suggest
AlexZhu-MSFT 6,591 Reputation points Moderator

2024-03-28T06:15:17.6466667+00:00

Hi TechUST,

I saw that you've create a new thread and I replied to it.

https://learn.microsoft.com/en-us/answers/questions/1634550/win11-wifi-issue

Regards,

Alex

Share via

Need Batch or PowerShell script

2 answers

Your answer