Inheritage of WIFI networks (Top Domain)

[Akaas]

Hi,

If we create an WIFI Network under the Top Domain, will the other Organisational Units inharitage the setting? We have configured an Wifi that will automaticly connect to our Wifi, but our inventory is spred over the OU's, we do not have all devices under one OU. 

I have a feeling that this does not work (inheritage) under Device -> Network, and we have to be sure before we go live. 

Kind Regards

[rdnixon · Accepted solution]

Thats how we do it - WiFi network for both Windows and ChromeOS are deployed at the root level (unless there are some very specific reasons not to). Then managed devices work at any site in our Trust. For ChromeOS, I always deploy WiFi to devices rather than users.

[rdnixon · Accepted solution]

Thats how we do it - WiFi network for both Windows and ChromeOS are deployed at the root level (unless there are some very specific reasons not to). Then managed devices work at any site in our Trust. For ChromeOS, I always deploy WiFi to devices rather than users.

[Akaas]

Thanks for the answer, we will try to get it to work using this method. 

[Kim_Nilsson · Accepted solution]

@Akaas - as mentioned by @rdnixon - that is how it is supposed to work, but you need to check the sub-OU where you are having issues, so it doesn't have an overriding policy, breaking the inheritance.

[Akaas]

Thanks! No problems right now, we are just curious if we create a Wifi under the root level that all the devices in the sub-OU will get the policy. I dont want to move all devices to the root. 

Thanks! 

[mpartenope4676]

A follow up question to this...is it worth it to go out of your way to upload certificates or does everyone just select "do not check"?  Currently working with a vendor who modified things and made certs for non-chromebooks but they can't get the certs to work for the CBs and part of me wants to say, "Don't bother." Thanks!

[mpartenope4676]

This is unfortunately still a problem. Google is useless. They want me to upload endless logs instead of working out a time to work with the wireless vendor directly. That's for any case I open with them recently and I'm pretty tired and disappointed that I can't work with anyone in real time at Google anymore! Has anyone configure their network to check/work with a wireless cert?

[Kim_Nilsson]

We're actually instead working towards using certs less even for other hardware.

Since all devices are managed, they will get the WPA (2/3) PSK automatically, and a device which isn't managed, they will not be able to access.

The "security increase" one believes certificates offer isn't worth the annoyances with devices not always being online.