WAP login / Radius / Windows 7


we trying log laptops wirelessly.  users can log laptops have cached credentials on, need them able login first time while connected via wireless.  suggestions appreciated.

we using:

windows 7

microsoft radius server

cisco waps

wpa2-ent ms-peap

we pushing out wireless settings our wpa-ent ssid via group policy following settings 802.1x settings:

cache user information subsequent   connections network

enabled

computer authentication

user authentication

maximum authentication failures

3

maximum eapol-start messages sent

held period (seconds)

start period (seconds)

authentication period (seconds)

single sign on type

prelogon

maximum acceptable delay network   connectivity

30

this network uses different vlan   authentication machine , user credentials

disabled

allow additional dialogs during   single sign on

enabled

this should posted in 2012 server general / security forum feel - 1 of mods prob move though. 

if pushing wifi settings out through gpo pc's need have network connection setup policy, after should able pre-logon windows wifi authenticates once user logs in - although can't remember if built in win7 or if need use additional software - know intel wnics provide option. 


regards,

denis cooper

mcitp ea - mct

help keep forums tidy, if has helped please mark answer

my blog

linkedin:



Windows Server  >  Directory Services



Comments

Popular posts from this blog

directory stack

After enabling Windows Server 2012 R2 DHCP Failover Getting Packet dropped because of Client ID hash mismatch

WMI Repository 4GB limit - Win 2003 Ent Question