Help with Wifi configuration profile

[bbot]

Prior to joining my company, the last person who managed the wifi configuration profile configured it so that machines would auto-join our wireless network. We found that updating the certificates and pushing out the updated certs over Wi-Fi (most users don't hardwire) cause the configuration profile to fail to apply. Has anyone had issues with 802.1x certificate authentication wifi profiles?

We setup a self service policy and instructed users to connect to a hardwire before running this policy in the interim, but would like to stop this configuration profile from applying to new machines.

Is there a way to stop this configuration profile from deploying to new machines, but not affect the machines that already have this profile? If we delete the profile, it'll disconnect all the users from wifi.

[pat_best]

Have you checked the scope that this config profile is being deployed to? From what I am reading, this profile applies to all new computers. I would suggest making a static group of the computers already assigned to this profile and set the scope to that group only if you no longer want to deploy this profile. If you want to remove this profile during the self service wifi profile installation you would want to scope the old config profile to a smart group based on computers that have the profile you want to remove. I would then have my self service policy install the new profile and run an inventory update to remove the computer from the smart group.

[davidacland]

If you set the profile to only be available in self service it won't automatically deploy to new devices.

[bbot]

The scope is set to "All Computers." That sounds like an awesome idea, I'll create a static group with all the people it is currently scoped to. (which is practically everyone right now).