Event ID 14003 — Wireless Network (IEEE 802.11) Policies Application

Applies To: Windows Server 2008 R2

The Wireless Network (IEEE 802.11) Policies, Group Policy, and client-side extensions are used to configure security and connectivity settings for domain member clients that are connecting to Institute of Electrical and Electronics Engineers (IEEE) 802.3 Ethernet networks. Group Policy settings apply to all Wireless Network Connections on the computer.

Event Details

Resolve

Apply Wireless Network (IEEE 802.11) Policies

"Wireless Group Policy couldn't be applied to your computer" errors

For computers already configured with Wireless Network (IEEE 802.11) Policies, Group Policy is applied for the WLAN AutoConfig service when the computer is started, and whenever an updated policy is downloaded. If Group Policy is updated on the server while the computer is turned off, the last known policy (which might be stale) is immediately applied when the computer is started. If the 802.1X settings on the computer authorize the computer for network access, updated policies are downloaded and applied when the computer connects to the network, prior to user authentication. If 802.1X settings on the computer cannot authorize computer network access at startup, then application of updated policies occurs immediately after user authentication.

If the Wireless Network (IEEE 802.11) Policies are not applied, it is typically because the wireless network profile does not conform to the schema, and therefore is invalid.

To perform these procedures, you must be logged on using a local computer Administrator account, or you must have been delegated the appropriate authority. If you are not logged on using an account that belongs to the Administrators group, you must be able to supply administrator credentials, in order to run the command prompt as administrator.

For more information, see Netsh Commands for Wireless Local Area Network (WLAN) on the Web at https://go.microsoft.com/fwlink/?LinkId=81751.

Determine if the wireless network profile is invalid

To determine if the wireless network profile is invalid:

1. Click Start, click All Programs, and then click Accessories.
2. Click Command Prompt, and then press ENTER.
3. At the command prompt, type netsh wlan show profile
4. If the output of the command returns a response indicating that "the profile does not conform to the schema," use the section named "Correcting Wireless Network (IEEE 802.11) Policies is not applied" to resolve the issue.

Correction for this reason code involves a three step process:

1. Log on to a computer that has a valid profile, use the netsh wlan export profile command to save the valid profile to portable media, such as a universal serial bus (USB) flash drive. Use the section, named "Export a valid profile", to export the profile so that it can be imported onto another computer.
2. Log on to the computer that has the invalid profile, connect the portable media with the valid profile, then use the netsh wlan add profile command to overwrite the invalid profile with the valid profile. Use the section, named "Import a profile", to import the profile onto another computer.
3. On the computer with the updated profile, run the gpupdate command to refresh Group Policy settings. Use the section, named "Run the gpupdate command to refresh Group Policy", to update Group Policy settings on the computer.

The following procedures provide the series of instructions required to complete the three-step corrective process.

Export a valid profile

1. Log on to the computer that has a valid profile, click Start, click All Programs, and then click Accessories.
2. Right-click Command Prompt, and then click Run as administrator, to run the command prompt as administrator.
3. At the command prompt, type netsh, press ENTER, type wlan, and then press ENTER.
4. Run the netsh WLAN export profile command as follows.

Netsh WLAN "export profile" syntax:

• export profile folder=PathAndFileName [[interface=]InterfaceName]

Netsh WLAN "export profile" command example:

• export profile folder="c:\Users\user\Documents\profile1.xml" interface="Local Area Connection"

Parameters

• folder Required. Specifies the path and file name for the profile XML file.
• interface Optional. Specifies the name of the interface on which the profile is configured.

Remarks

• The folder parameter must specify an existing folder that is accessible from the local computer.
• The path can be either an absolute path or relative path to the current working directory. In addition, "." refers to the current working directory, and ".." refers to the parent directory of the current working directory.
• The folder name cannot be a Universal Naming Convention (UNC) path.
• If the interface parameter is specified, only the specified profile associated with that interface is exported. Otherwise all profiles on the computer with the specified name are exported.
• Profiles of specified interfaces are saved in the format "InterfaceName ProfileName.xml." Profiles at the computer level are saved in the file name format "ProfileName.xml."
• There is wildcard support for this parameter. You can use the characters ? and * to replace a letter and letters of the interface name, respectively.

Import a profile

1. Log on to a computer that has the invalid profile, click Start, click All Programs, and then click Accessories.
2. Right-click Command Prompt, and then click Run as administrator, to run the command prompt as administrator.
3. At the command prompt, type netsh, press ENTER, type wlan, and then press ENTER.
4. Run the netsh wlan add profile command as follows.

Netsh WLAN "add profile" syntax:

• add profile filename=PathAndProfileName interface=InterfaceName

Netsh WLAN "add profile" example:

• add profile filename="C:\Users\WirelessUser\Documents\profile1.xml" interface="Local Area Connection"

Parameters

• filename Required. Specifies the path and name of the XML file containing the profile data.
• interface Required. Specifies the name of the interface on which the profile will be set.

Remarks

• The interface parameter specifies one of the interface names shown by the netsh wlan show interface command.
• The profile will be added to the specified interface.
• There is wildcard support for this parameter. You can use the characters ? and * to replace a letter and letters of the interface name, respectively.

Run the gpupdate command to refresh Group Policy

1. Click Start, click All Programs, and then click Accessories.

2. Right-click Command Prompt, and then click Run as administrator, to run the command prompt as administrator.

3. At the command prompt, type gpupdate and then press ENTER.

4. "Ensure that the output of the command says "User Policy update has completed successfully" and "Computer Policy update has completed successfully."

Verify

There are two methods to verify that Wireless Network (IEEE 802.11) Policies is applied to the domain member client:

• Check for applied Wireless Network (IEEE 802.11) Policies by using Resultant Set of Policy
• Check for applied Wireless Network (IEEE 802.11) Policies by using the netsh wlan command

Notes:

To perform these procedures, you must be logged on by using a local computer Administrator account, or you must have been delegated the appropriate authority. If you are not logged on by using an account that belongs to the Administrators group, you must be able to supply administrator credentials, in order to run the command prompt as administrator.

Check for applied Wireless Network (IEEE 802.11) Policies by using Resultant Set of Policy

To check for applied Wireless Network (IEEE 802.11) Policies by using Resultant Set of Policy.

1. Click Start, click All Programs, and then click Accessories.
2. Right-click Command Prompt, and then click Run as administrator, to run the command prompt as administrator.
3. At the command prompt, type rsop.msc, to open the Resultant Set of Policy Microsoft Management Console (MMC) snap-in.
4. In Computer Configuration, open Windows Settings, open Security Settings, and then select Wireless Network (IEEE 802.11) Policies.
5. If a policy is shown in the details pane, then Wireless Network (IEEE 802.11) Policies is applied on the computer.

Check for applied Wireless Network (IEEE 802.11) Policies by using the netsh wlan command

To check for applied Wireless Network (IEEE 802.11) Policies by using the netsh wlan command.

1. Click Start, click All Programs, and then click Accessories.
2. Right-click Command Prompt, and then click Run as administrator, to run the command prompt as administrator, and then press ENTER, and then do one of the following:
   • At the command prompt, type netsh wlan show profile, to list the profiles.
   • At the command prompt, type netsh wlan show profileProfileName (where ProfileName is the name of the wireless profile specified in Wireless Network (IEEE 802.11) Policies), to display the profile settings.
3. If the command returns results indicating that "settings are configured by Group Policy," then Wireless Network (IEEE 802.11) Policies is applied on the computer.

Related Management Information

Wireless Network (IEEE 802.11) Policies Application

Networking