Is there a way to clear saved wireless connection settings in XP at logoff

Question

We have a load of old stand alone Windows XP netbooks that are loaned out to staff on a daily basis.
Different staff use the machines at different times depending on their needs.
We have 2 different wireless networks at the university, each one requires authenticated login using the users university domain username and password. Whenever a user logs on to the Stand Alone wireless laptops that we provide and connect to the wireless their settings seem to be saved on the laptop. (This is bad as any further use of the laptop on the wireless network looks like it comes from them, I would like to prevent this being the case) the check box to remember my username and password is not checked.
I know I can simply remove the Wireless networks from the list of saved networks but they require configuration in order for the users to be able to connect in the first place. See Here My perfect scenario would be that the credentials are stored until logout at which point the users details would be cleared.

Also: If they change their password then that laptop cannot connect to the network anymore as their Username is stored on the laptop and is greyed out so it can't be changed, where are these setting stored so I can clear them.

Answer 1

The PEAP credentials are stored in the registry so if you just clear out the key (HKEY_CURRENT_USER\Software\Microsoft\EAPOL\UserEapInfo) at log in it should do the trick whilst leaving the actual connection info alone.

The following Powershell SCript running at logon works perfectly:

Remove-item -path registry::HKEY_CURRENT_USER\Software\Microsoft\EAPOL\UserEapInfo -recurse
Restart-Service WZCSVC

It leaves the settings intact but clears out the users details.
The restart of the wireless service only works if Windows is managing your wireless settings and this drops the connection and restarts it searching for connections with no stored credentials (otherwise it holds onto the connection with the old credentials even though they aren't stored)