Wireless settings o...
 
Notifications
Clear all

Wireless settings on XP

5 Posts
2 Users
0 Likes
220 Views
keydet89
(@keydet89)
Posts: 3568
Famed Member
Topic starter
 

All,

Does anyone know where wireless information is maintained on an XP system?

When I've gone away, I've connected to the wireless in a hotel, and when I come back, I connect again to my WAP with no trouble. This tells me that Windows XP has a way of keeping track of these things, but when I search for the SSID in the Registry, I don't find anything.

Does anyone know where this data is maintained? I know that Cisco and 3Com clients have been found to maintain this data in the Registry, but I haven't been able to find anything specific through research or testing…yet.

Thanks,

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com

 
Posted : 02/07/2005 11:44 am
andy1500mac
(@andy1500mac)
Posts: 79
Trusted Member
 

Good Morning Harlan,

There seems to be quite a bit of info in the following key:

HKLM\SYSTEM\CONTROLSET001\ENUM\PCMCIA\ … detailing information for the PCMCIA slot. Mine includes Dell true mobile settings although I see no mention of my ssid.

I have a sub folder numbered one (1) with another interesting sub folder called LogConf….might be a start.

Andrew-

 
Posted : 02/07/2005 1:32 pm
andy1500mac
(@andy1500mac)
Posts: 79
Trusted Member
 

Looks to me as if the bulk of the info in the registry pertains to interrupts, drivers, guid and the card manufacturer.

Most of the configuration if is probably stored on the card itself. I assume your card is configured to connect to your preferred network (SSID),the home/work one so it will automatically connect when within range…if not it will search out non preferred.

Here is some MS info for windows XP and the 802.11 standard along with some reg keys pertaining to the protocols transmission behavior.

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/8e74974f-c951-48ce-8235-02f4ed8e7492.mspx

Andrew-

 
Posted : 03/07/2005 1:40 am
keydet89
(@keydet89)
Posts: 3568
Famed Member
Topic starter
 

Andy

Thanks for the replies.

Your second response does point to registry keys, but the protocols they apply to are for authentication, not communications or transmission over the Internet.

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com

 
Posted : 03/07/2005 11:32 am
keydet89
(@keydet89)
Posts: 3568
Famed Member
Topic starter
 

Okay, I found them and blogged the info…

H. Carvey
"Windows Forensics and Incident Recovery"
http//www.windows-ir.com
http//windowsir.blogspot.com

 
Posted : 10/07/2005 3:41 pm
Share: