How can I prevent laptops from connecting to open Wi-Fi networks?

While you can set up policies to block open Wi-Fi, it might create issues later. Blocking all open networks could prevent users from accessing certain connections they need, especially in places like hotels or coffee shops. Instead, I’d recommend a solution that uses always-on VPNs and DNS filtering which allows more flexibility while still keeping data secure.

Yes, you can actually block open networks through Group Policy. Navigate to Computer Configuration > Windows Settings > Security Settings > Wireless Networks > Wireless Network Policy. However, implementing a VPN that stays connected at all times (like OpenVPN) might be a smarter approach, ensuring data encryption for laptops when out and about.

You might want to issue mobile hotspots to employees instead, rather than try to control all devices on public WiFi. Ultimately, better device management can help you feel more secure about letting users connect publicly. Consider using VPN policies and DNS filtering to manage what users can access when they're not in the office.