How to get supported authentication and encryption capabilities of an wireless adapter?

The following sample application, written in C++, will show how to do it:

// capability.cpp : Defines the entry point for the console application.
//
#include "stdafx.h"
#include <windows.h>
#include <commctrl.h>
#include <ntddndis.h>
#include <nuiouser.h>
#include <winioctl.h>

#define OID_802_11_CAPABILITY 0x0d010122

typedef enum 
{
    Ndis802_11AuthModeWPA2 = Ndis802_11AuthModeWPANone + 1,
    Ndis802_11AuthModeWPA2PSK,
};

typedef struct _NDIS_802_11_AUTHENTICATION_ENCRYPTION 
{
    NDIS_802_11_AUTHENTICATION_MODE AuthModeSupported;
    NDIS_802_11_ENCRYPTION_STATUS EncryptStatusSupported;
} NDIS_802_11_AUTHENTICATION_ENCRYPTION, 
 *PNDIS_802_11_AUTHENTICATION_ENCRYPTION;

typedef struct _NDIS_802_11_CAPABILITY 
{
    ULONG Length;
    ULONG Version;
    ULONG NoOfPMKIDs;
    ULONG NoOfAuthEncryptPairSupported;
    NDIS_802_11_AUTHENTICATION_ENCRYPTION
        AuthenticationEncryptionSupported[1];
} NDIS_802_11_CAPABILITY, *PNDIS_802_11_CAPABILITY;

int _tmain(int argc, _TCHAR* argv[])
{
    if (argc < 2)
    {
        printf("Usage: capability <adapter name>\n");
        printf("       <adapter name> name of the wireless adapter\n");
        return -1;
    }

LPCTSTR pszAdapter = argv[1];

HANDLE hDevice = CreateFile(
        NDISUIO_DEVICE_NAME, GENERIC_READ, 
        FILE_SHARE_READ | FILE_SHARE_WRITE, 
        NULL, OPEN_EXISTING, 
        FILE_ATTRIBUTE_NORMAL | FILE_FLAG_OVERLAPPED,
        NULL);

if (hDevice == INVALID_HANDLE_VALUE)
    {
        DWORD dwError = GetLastError();

printf("Function \"CreateFile\" failed (0x%08x).\n", dwError);
        return -2;
    }

DWORD dwBytesReturned = 0;

BYTE buf[512];
    PNDISUIO_QUERY_OID pNDISUIOQueryOid = (PNDISUIO_QUERY_OID) buf;
    pNDISUIOQueryOid->ptcDeviceName = (PTCHAR) pszAdapter;
    pNDISUIOQueryOid->Oid = OID_802_11_CAPABILITY;

if (!DeviceIoControl(
        hDevice, IOCTL_NDISUIO_QUERY_OID_VALUE, 
        pNDISUIOQueryOid, sizeof(buf), 
        pNDISUIOQueryOid, sizeof(buf), 
        &dwBytesReturned, NULL))
    {
        DWORD dwError = GetLastError();

CloseHandle(hDevice);
        printf("Function \"DeviceIoControl\" (OID_802_11_CAPABILITY) failed (0x%08x).\n", 
            dwError);
        return -3;
    }

PNDIS_802_11_CAPABILITY pCap = (PNDIS_802_11_CAPABILITY) pNDISUIOQueryOid->Data;

if (pCap->Version != 2) 
    {
        CloseHandle(hDevice);
        printf("Unsupported OID_802_11_CAPABILITY data (ver %d).\n", pCap->Version);
        return -4;
    }

for (ULONG i = 0; i < pCap->NoOfAuthEncryptPairSupported; ++i)
    {
        NDIS_802_11_AUTHENTICATION_MODE authMode = 
            pCap->AuthenticationEncryptionSupported[i].AuthModeSupported;
        NDIS_802_11_ENCRYPTION_STATUS encStat = 
            pCap->AuthenticationEncryptionSupported[i].EncryptStatusSupported;

if (authMode == Ndis802_11AuthModeOpen && 
            encStat == Ndis802_11EncryptionDisabled)
        {
            printf("Open System: none\n");
        }
        else if (authMode == Ndis802_11AuthModeOpen && 
                 encStat == Ndis802_11Encryption1Enabled)
        {
            printf("Open System: WEP\n");
        }
        else if (authMode == Ndis802_11AuthModeShared && 
                 encStat == Ndis802_11EncryptionDisabled)
        {
            printf("Shared Key: none\n");
        }
        else if (authMode == Ndis802_11AuthModeShared && 
                 encStat == Ndis802_11Encryption1Enabled)
        {
            printf("Shared Key: WEP\n");
        }
        else if (authMode == Ndis802_11AuthModeWPA && 
                 encStat == Ndis802_11Encryption2Enabled)
        {
            printf("WPA: TKIP\n");
        }
        else if (authMode == Ndis802_11AuthModeWPA && 
                 encStat == Ndis802_11Encryption3Enabled)
        {
            printf("WPA: AES\n");
        }
        else if (authMode == Ndis802_11AuthModeWPAPSK && 
                 encStat == Ndis802_11Encryption2Enabled)
        {
            printf("WPA-PSK: TKIP\n");
        }
        else if (authMode == Ndis802_11AuthModeWPAPSK && 
                 encStat == Ndis802_11Encryption3Enabled)
        {
            printf("WPA-PSK: AES\n");
        }
        else if (authMode == Ndis802_11AuthModeWPANone && 
                 encStat == Ndis802_11EncryptionDisabled)
        {
            printf("WPA-None: none\n");
        }
        else if (authMode == Ndis802_11AuthModeWPANone && 
                 encStat == Ndis802_11Encryption2Enabled)
        {
            printf("WPA-None: TKIP\n");
        }
        else if (authMode == Ndis802_11AuthModeWPANone && 
                 encStat == Ndis802_11Encryption3Enabled)
        {
            printf("WPA-None: AES\n");
        }
        else if (authMode == Ndis802_11AuthModeWPA2 && 
                 encStat == Ndis802_11Encryption2Enabled)
        {
            printf("WPA2: TKIP\n");
        }
        else if (authMode == Ndis802_11AuthModeWPA2 && 
                 encStat == Ndis802_11Encryption3Enabled)
        {
            printf("WPA2: AES\n");
        }
        else if (authMode == Ndis802_11AuthModeWPA2PSK && 
                 encStat == Ndis802_11Encryption2Enabled)
        {
            printf("WPA-PSK2: TKIP\n");
        }
        else if (authMode == Ndis802_11AuthModeWPA2PSK && 
                 encStat == Ndis802_11Encryption3Enabled)
        {
            printf("WPA-PSK2: AES\n");
        }
        else
        {
            printf("<unknown> (auth = %d, encr = %d)\n", 
                authMode, encStat);
        }
    }

CloseHandle(hDevice);

return 0;
}

The following image shows the supported authentication and encryption capabilities of our HP iPAQ hx2490b: