Block users from connecting to Wi-Fi networks

The network shell (Netsh) command line utility allows local or remote configuration of network devices such as wireless interfaces. Using the Netsh wlan option you can create filters that block users from connecting to specific wireless networks which may pose a risk to the security of your environment. Users connecting to unsecure open wireless networks increase the risks of their computers being compromised.

The wireless network SSID is required to set a filter. To add a wireless network into the wireless allowed or blocked list configured on your system, use the following syntax:

netsh wlan add filter [permission=]allow|block|denyall} [[ssid=]<Wi-Fi name string> [networktype=]infrastructure|adhoc

For example, to block the wireless network with an SSID set as Joe the neighbor, use the following syntax:

netsh wlan add filter permission=block ssid=’Joe the neighbor’ networktype=adhoc

To view a list of set filters, use the following syntax:

netsh wlan show filters

To removing a filter, use the following syntax:

netsh wlan delete filter [permission=]allow|block|denyall} [[ssid=]<Wi-Fi name string> [networktype=]infrastructure|adhoc

Note, that parameter SSID is required if permission is allow or block. If permission is denyall then parameter SSID should not be given.

Share