Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

First off, I am not a sysadmin, so feel free to correct any mistakes in my question.

We have a Windows Server 2008 R2 domain with 802.1X authenticated wireless access for laptops with Windows 7 installed. Most of the laptops are in the domain, but some are not. The people using those machines do have a domain user account to access network resources, but are not logged on to the machine with that account.

How can we allow the windows 7 machines that are not in the domain to connect to the wireless network?

share|improve this question
add comment

2 Answers 2

up vote 3 down vote accepted

Under advanced network properties of that SSID untick "use logged on user's credentials to connect to this network" and then you will get a prompt for the username and password or a balloon tip to say additional information required. Click on it and type domain\username and then the password. Thats it!

share|improve this answer
    
actually, on windows 7 it's a bit more complex: in advanced settings, choose 'user authentication'. Click on 'Settings' for PEAP, click on 'configure' for EAP-MSCHAPv2 and uncheck 'automatically use my windows logon name and password (and domain if any)'. But still, this was the right approach, so thanks! –  StephaneT Dec 14 '11 at 14:05
add comment

The Windows wireless client would not let you use arbitrary credentials for PEAP-MSCHAPv2. But you could set up a new WLAN to use PEAP-TLS with certificates instead of password-based MSCHAPv2 authentification. Certificates can be used on non-domain machines as well with only minor limitations. See the technet docs for details on how to set this up.

share|improve this answer
    
The Windows wireless client would not let you use arbitrary credentials - apparently this is outdated / has changed. Try rabbid's solution instead - seems easier than setting up a CA and an additional wireless network. –  the-wabbit Dec 14 '11 at 10:36
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.