This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hi Expert,
I am upgrading the machine to Win11 23H2 in our environment using the in-place upgrade method, but after the upgrade, it's not connecting to the corporate Wi-Fi. I also checked that the machine is patched with the latest month's updates. So now, can you provide a script that forgets the corporate Wi-Fi connection? Ideally, it should be some kind of login script that runs only once when a user logs into Win11 after upgrading. Also, would request please test script in your test environment.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 40%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
I understand you're looking for a script to forget the wifi but what is the actual issue? Is it possible that Credential Guard in Windows 11 is causing your issue? Perhaps you were using NTLM/MSCHAP and need to switch to EAP-TLS in your wifi profile deployment?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(166.4, 66%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAM%3C/text%3E%3C/svg%3E)
Hi,
Sure, you can clear the wifi profile using .bat or .ps1 through GPO. If we use the batch file, only a single command line is required.
netsh wlan delete profile name=<wifi_name>
Regards,
Alex
Hi Alex, thanks for replying , i need script which can fires only once when user login after win11 upgrade 1st time. I think The command will trigger every time. This will not help to achieve my goal.
Perhaps this would work if you added the command to the user's RunOnce registry key?
Hi TechUST,
If you prefer the script run only once, you can use the script below:
$file_result = "c:\even_run.txt"
if (test-path $file_result)
{
write-host "$file_result exists. ignored!"
}
else
{
$command = 'netsh wlan delete profile name=actual_wifi_name'
invoke-expression $command
$str1 = "anything you want to put here"
add-content -path $file_result -value $str1
write-host "wlan profile removed!"
}
Regards,
Alex Zhu
Hi Alex
I have tried running the script provided by you, but I am encountering an error stating 'You do not have sufficient privileges or the profile "Corpwifi" on interface is on group policy'. A text file is being created, and 'Write-host' just said it's completed. If there is an error, 'Write-host completed' should not be displayed. However, when I run 'netsh wlan delete profile name="Corpwifi", it works fine, so I believe this is not a privilege or GPO issue. Please let me know one more thing should I keep only this path "$file_result = "c:\Wifi_Forget.txt" or i can change to anywhere like Userprofile\Wifi_Forget.txt"
My goal is to forget the Corp wifi only once
I would request you to please review the script once again and test it in your test environment if possible, and share. It would be a great help.
$file_result = "c:\Wifi_Forget.txt"
if (Test-Path $file_result) {
Write-Host "$file_result exists. ignored!"
} else {
$command = 'netsh wlan delete profile name=Corpwifi'
Invoke-Expression $command
$str1 = "corp Wifi forgotten"
Add-Content -Path $file_result -Value $str1
Write-Host "wlan profile removed!"
}
It would be big help if you could modify the script as per my need because i am beginner with scripting.
Hi,
Which user context is used when testing the script? For start-up scripts, it is run under "SYSTEM" context. If we want to test the script, you cannot use the current logged on user. Please follow the below steps to test:
1, download PSTools
2, execute 'psexec -s -i powershell.exe', which should open a new window
3, in the new window, go to the script folder, try './remove_wlan_profile_only_once.ps1'
Note: no script can run in all environments, and I cannot simulate all your conditions in my lab.
Regards,
Alex
Hi Alex, trying to test run as admin manually first. And getting the same error
Hi TechUST,
Every environment differs and we cannot probe the problem in your real environment.
As stated above, it is NOT correct to use any logon user to test the startup script. To test the script and solve the problem appeared, you need to use PSExec.exe as mentioned above.
Please provide the screenshots for any problems that occur during testing with PSExec.exe, so that we can continue troubleshooting. Thanks.
Regards,
Alex
The script I have is currently running manually. Can i deploy the script through SCCM? Meaning, if the machine is connected to the same Wi-Fi profile, will it execute through SCCM, or do I need to deploy it through GPO? please suggest
$flagFile = "$env:TEMP\CorpWifiForget.log"
if (-not (Test-Path $flagFile)) {
# Check if any Wi-Fi profile contains "Corp"
$profileExists = netsh wlan show profiles | Select-String 'Corp'
if ($profileExists) {
# Forget Wi-Fi profiles containing "Corp"
netsh wlan delete profile name=*Corp* | Out-Null
Write-Output 'Wi-Fi profiles containing "Corp" have been forgotten.'
}
else {
Write-Output 'No Wi-Fi profiles containing "Corp" found.'
}
# Create a flag file to indicate that the script has been executed
New-Item -ItemType File -Path $flagFile -Force
```}
else {
```json
Write-Output 'Script has already been executed. Wi-Fi profiles containing "Corp" have already been forgotten.'
```}
Please suggest
Hi TechUST,
I saw that you've create a new thread and I replied to it.
https://learn.microsoft.com/en-us/answers/questions/1634550/win11-wifi-issue
Regards,
Alex