Public/guest Wifi - Deny employees using the Wifi

  • 1
  • Question
  • Updated 2 years ago
I am currently working on a project which includes the opportunity to deny employees feeding on the public wifi / guest SSID.
Is there a certain way to only allow a few certain people to use the public wifi and deny other users connection to the WiFi-network every day?

I know this a shot in dark but I wonder if it is possible to blacklist users which has connected to the wifi over a certain period. New arriving guests must have the opportunity to connect and reconnect, but not employees which keep connection to the wifi.


Any tips and hints is appreciated.
Photo of Lars Fredrik Bach

Lars Fredrik Bach

  • 7 Posts
  • 0 Reply Likes
  • thankful

Posted 2 years ago

  • 1
Photo of Fraser Hess

Fraser Hess

  • 60 Posts
  • 7 Reply Likes
We recently blocked our corporate Windows PCs from connecting to our guest network using Group Policy. For OS X, we are looking at scheduling the networksetup command to remove a guest WiFi profile.
Photo of Dale Vo

Dale Vo

  • 3 Posts
  • 0 Reply Likes
Agree with Mr. Hess, GPO setup to push corporate 802.1x profile and to deny accessing guess wifi worked like a charm!
Photo of Colby Howser

Colby Howser

  • 1 Post
  • 0 Reply Likes
Here's the script we use on OSX to remove the guest wifi profile, I have it run once per day on every machine:


#!/bin/bash
RESULT=`networksetup -listpreferredwirelessnetworks en0 | grep "Guest Wifi"`
if [ ! -z "$RESULT" ]
then
    networksetup -removepreferredwirelessnetwork en0 "Guest Wifi"
fi
Photo of Dale Vo

Dale Vo

  • 3 Posts
  • 0 Reply Likes
I take a different approach to create a "Guest Wifi" profile with a wrong password so users can't connect to the guest network inadvertently (only work well if users don't have admin rights on the computer)
(Edited)