WAP login / Radius / Windows 7

we trying log laptops wirelessly.  users can log laptops have cached credentials on, need them able login first time while connected via wireless.  suggestions appreciated.

we using:

windows 7

microsoft radius server

cisco waps

wpa2-ent ms-peap

we pushing out wireless settings our wpa-ent ssid via group policy following settings 802.1x settings:

cache user information subsequent   connections network	enabled
computer authentication	user authentication
maximum authentication failures	3
maximum eapol-start messages sent
held period (seconds)
start period (seconds)
authentication period (seconds)
single sign on type	prelogon
maximum acceptable delay network   connectivity	30
this network uses different vlan   authentication machine , user credentials	disabled
allow additional dialogs during   single sign on	enabled

this should posted in 2012 server general / security forum feel - 1 of mods prob move though. 

if pushing wifi settings out through gpo pc's need have network connection setup policy, after should able pre-logon windows wifi authenticates once user logs in - although can't remember if built in win7 or if need use additional software - know intel wnics provide option. 

---

regards,

denis cooper

mcitp ea - mct

help keep forums tidy, if has helped please mark answer

my blog

linkedin:

Windows Server  >  Directory Services