{"id":108298,"date":"2023-06-06T07:00:00","date_gmt":"2023-06-06T14:00:00","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/oldnewthing\/?p=108298"},"modified":"2023-06-06T09:10:39","modified_gmt":"2023-06-06T16:10:39","slug":"20230606-00","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/oldnewthing\/20230606-00\/?p=108298","title":{"rendered":"How can I make WiFi passwords per-user rather than per-system?"},"content":{"rendered":"<p>By default, newly-created wireless networking profiles are made visible to all users. I&#8217;m guessing that the idea is that if you connect to a Wi-Fi network, you are setting it up for the entire machine. That way, other users on the same computer can use the same wireless network.<\/p>\n<p>If you don&#8217;t like this, you can change the <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows\/win32\/nativewifi\/wlan-policyschema-alloweveryonetocreatealluserprofiles-globalflags-element\"> <code>allow\u00adEveryone\u00adTo\u00adCreate\u00adAll\u00adUser\u00adProfiles<\/code> group policy setting to <code>false<\/code><\/a>. When set to <code>false<\/code>, only users with <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows\/win32\/nativewifi\/native-wifi-api-permissions\"> <code>wlan_<wbr \/>secure_<wbr \/>add_<wbr \/>user_<wbr \/>all_<wbr \/>user_<wbr \/>profiles<\/code><\/a> permission can create system-wide profiles. That permission is granted by default to Administrators, but you can customize that by calling <code>Wlan\u00adSet\u00adSecurity\u00adSettings<\/code> with your custom access list.<\/p>\n<p><b>Bonus chatter<\/b>: Note that being in the all users profile means that anyone can see the password. My guess is that this is the main reason for setting <code>allow\u00adEveryone\u00adTo\u00adCreate\u00adAll\u00adUser\u00adProfiles<\/code> to <code>false<\/code>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A little-known system configuration setting.<\/p>\n","protected":false},"author":1069,"featured_media":111744,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[26,104],"class_list":["post-108298","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-oldnewthing","tag-other","tag-tipssupport"],"acf":[],"blog_post_summary":"<p>A little-known system configuration setting.<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/posts\/108298","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/users\/1069"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/comments?post=108298"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/posts\/108298\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/media\/111744"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/media?parent=108298"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/categories?post=108298"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/tags?post=108298"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}