Hi, everyone!
Our organization uses Hexnode for device management, and I was wondering if there’s a way to block specific Wi-Fi networks from being accessed on our team’s macOS devices. Is this something that can be done via macOS system settings, or does Hexnode offer a solution for this?
31 Views
Hi @otis! While macOS doesn’t provide a built-in option to block specific Wi-Fi networks, Hexnode can help you achieve this using a custom script. You can push the following shell script through Hexnode’s Execute Custom Script remote action. Simply replace the SSID values with the names of the networks you want to block. You can also block multiple networks at once with this script.
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 |
# Define log file log_file="/Library/Logs/bannedwifi.log" # Function to log messages with timestamps log() { echo "[$(date '+%Y-%m-%d %H:%M:%S')] $1" | tee -a "$log_file" } log "Starting Wi-Fi check script..." # List of banned SSIDs banned_ssids=("SSID-1" "SSID-2" "SSID-3" "SSID-4") # Get the currently logged-in user log "Detecting current user..." loggedInUser=$("/usr/bin/stat" -f%Su "/dev/console") log "Current user: $loggedInUser" # Get the Wi-Fi interface (usually en0 or en1) log "Fetching Wi-Fi interface..." wifiinterface=$(networksetup -listallhardwareports | awk '/Wi-Fi|AirPort/{getline; print $2}') if [[ -z "$wifiinterface" ]]; then log "ERROR: Could not detect Wi-Fi interface." exit 1 fi log "Found Wi-Fi interface: '$wifiinterface'" # Get the current SSID log "Checking current SSID..." currentssid=$(ipconfig getsummary "$wifiinterface" | awk -F ' SSID : ' '/ SSID : / {print $2}') if [[ -z "$currentssid" ]]; then log "No SSID detected. Not connected to a Wi-Fi network." exit 0 fi log "Current SSID: '$currentssid'" # Check if current SSID is in the banned list if printf '%s\n' "${banned_ssids[@]}" | grep -qxF "$currentssid"; then log "Connected to banned network '$currentssid'. Proceeding to disconnect and remove..." # Notify user with a popup osascript -e "display dialog \"You are not permitted to connect this device to '$currentssid'.\" buttons {\"OK\"} default button 1 with icon caution" log "Removing '$currentssid' from preferred networks..." networksetup -removepreferredwirelessnetwork "$wifiinterface" "$currentssid" log "Turning Wi-Fi off..." networksetup -setairportpower "$wifiinterface" off sleep 2 log "Turning Wi-Fi back on..." networksetup -setairportpower "$wifiinterface" on log "'$currentssid' removed and Wi-Fi restarted." else log "Not connected to a banned network. No action needed." fi |
Let us know if you encounter any issues while executing the script. And just a heads-up – we always recommend testing scripts in a controlled environment before deploying them organization-wide.
Regards,
Ben Clarke
Hexnode UEM
Hi Ben! Just to confirm, will this script work on macOS Sequoia? Are there any limitations I should be aware of?
Absolutely, @otis. This script is fully compatible with macOS Sequoia. You can safely deploy it to devices running on that OS without any issues.
Don't have an account? Sign up
