This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hi All,
How can I disable the "View Wi-Fi Security Key" option for end-user devices through Intune? Deleting the registry key HKEY_CLASSES_ROOT\AppID{86F80216-5DD6-4F43-953B-35EF40A35AEE} only encrypts the password from Advanced Wi-Fi Network properties. Here's an image of the option I'm referring to:
Hey, Thanks, is there any way where we can restrict this view option to end-user devices? Thanks ZB
@Pavel yannara Mirochnitchenko How to remove admin rights for those users from Intune? because I have 500+ users in the Azure active directory. Thanks ZB
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 91%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESA%3C/text%3E%3C/svg%3E)
@Zeeshan Bute I don't know if you've found a solution since, but using the following article as an example: https://learn.microsoft.com/en-ie/answers/questions/1633038/windows-11-23h2-view-wi-fi-security-key
I have created a Powershell script that modifies the permissions of this button to pop-up a UNC :
# If not present, create PSDrive "HKCR"
New-PSDrive -Name "HKCR" -PSProvider Registry -Root "HKEY_CLASSES_ROOT" -ErrorAction SilentlyContinue
# Path of the register key
$registryPath = "HKCR:\AppID\{86F80216-5DD6-4F43-953B-35EF40A35AEE}"
# Get ACL of the register key
$acl = Get-Acl -Path $registryPath
# Remove all the rules
$acl.SetAccessRuleProtection($true, $false)
$acl.Access | ForEach-Object { $acl.RemoveAccessRule($_) }
# Add the group "SYSTEM"
$groups = "SYSTEM"
# Create an ACL for the group "SYSTEM"
$permission = $groups, "FullControl", "Allow"
$accessRule = New-Object System.Security.AccessControl.RegistryAccessRule($permission)
# Set ACL for rules
$acl.SetAccessRule($accessRule)
# Add group "Administrateur" as Owner
$acl.SetOwner([System.Security.Principal.NTAccount]"Administrators")
# Set ACL
Set-Acl -Path $registryPath -AclObject $acl
@Safak AYDIN Hi,
Thanks for your consideration on this.
Could you please guide me more with your PowerShell script? and how I will perform and also if you can help with the steps to deploy this script.
Thanks
ZB
I therefore remove all the defined groups and simply leave the "SYSTEM" group (top right on Windows).
As a result, only administrator accounts will have the right to read the Wifi password,
If you don't have such a system, I recommend either creating a GPO for deployment, or deploying via psexec or PDQ Deploy, which offers 2 weeks' free use.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 62%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFH%3C/text%3E%3C/svg%3E)
try to delete the string in page regedit but i get the error as you can see
I have also try the script error occur - run with admin right
@Zeeshan Bute you can use my script: https://github.com/yannara/Intune/blob/main/RemoveLocalAdmin.ps1 Assign it to users.
This is very interesting finding. We don't use certificate based Wifi anymore, but pre-shared password is stored in Intune policy. I didn't know that it can be viewed from Windows. But, good news is that viewing the password requires admin rights, so we are partly safe from that :)
@Zeeshan Bute by removing local admin rights from users for sure :)
@Safak AYDIN Hey Safak
try to delete the string in page regedit but i get the error you can see also try the script error occur
@fedthans hamann Have you checked your registry key to see if it exists?
yes it is there the key and the respont is attach here.
Sorry forgot to say that it's win 10 I'm trying on.