Tjyylli

I want to automate the configuration settings which are needed in our 802.1X environment. For this I need to pass user credentials.

Therefore I want to build a small GUI which expects the user credentials. After a click on something like a logon button, a powershell script shall import a xml file which contains configuration data for the network interface.

This XML will be imported with:

netsh lan add profile filename="PATH_AND_FILENAME.xml" interface="INTERFACE_NAME"

After this is done I want to pass the user credentials (which were given in the GUI) to the OS without using the built in dialog.

I found out that the registry entries which store the credentials are something like:

User HKCUSoftwareMicrosoftWlansvcUserDataProfiles[GUID]

and

Machine HKLMSoftwareMicrosoftWlansvcUserDataProfiles[GUID]

but these are for wireless connections.

Does anyone know the correct registry entry?

Trying o pull user creds is not prudent. There are not there in plain text and are not reversible for passing on to any other action.

You say you are presenting a GUI to ask the user for creds. During any interactive session, if you asking for creds, you need to ask for them securely.

Once you've done that, you can get the username and password directly via code. Yet, you are now handling very sensitive user information. You really need to check with your security / risk management / policy team about doing this. This is because you are literally capturing user creds that you can use anywhere the user has access and nothing prevents you from running off with them later.

So, you could simply use Get-Credential or create a new PSCredential object, or use SecureString to ask for user creds, then when you need them, just reverse that.

($Creds = Get-credential -Credential "$env:USERDOMAIN$env:USERDOMAIN")



$Creds.GetNetworkCredential().UserName

$Creds.GetNetworkCredential().Password



# Results



UserName                             Password

--------                             --------

contosotestuser System.Security.SecureString

testuser

password







($Username = Read-Host -Prompt 'Enter username')

($Password = Read-Host -Prompt 'Enter password' -AsSecureString)

($Creds = New-Object System.Management.Automation.PSCredential ($Username, $Password))



$Creds.GetNetworkCredential().UserName

$Creds.GetNetworkCredential().Password



# Results



Enter username: contosotestuser

contosotestuser

System.Security.SecureString



UserName                             Password

--------                             --------

contosotestuser System.Security.SecureString

testuser

password





($Creds = New-Object PSCredential $Username, $Password)



$Creds.GetNetworkCredential().UserName

$Creds.GetNetworkCredential().Password





# Results



$Creds



UserName                             Password

--------                             --------

contosotestuser System.Security.SecureString



UserName                             Password

--------                             --------

contosotestuser System.Security.SecureString

testuser

password