Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I am configuring NPS as a RADIUS authentication source for my wireless clients.

I am trying to differentiate between school hours and after hours as I need to connect certain users to a different network for after hours access to extra resources.

I can setup day and time restrictions but with only to the hour precision. I require at worst 30 minute intervals with 15 minute intervals being ideal.

Does anyone know if this is possible with Microsoft's NPS?

share|improve this question

1 Answer 1

Yes it is possible.

Step to do:

  1. setup some example time restriction that GUI allows,
  2. dump the NPS config
    with netsh:
    netsh nps export filename="path\file.xml" exportPSK=YES
    with powershell:
    Export-NpsConfiguration -Path <filename>
  3. edit the XML file. These are the droids You are looking for (example): <msNPConstraint xmlns:dt="urn:schemas-microsoft-com:datatypes" dt:dt="string">TIMEOFDAY("0 00:00-24:00; 1 00:00-02:00 03:00-24:00; 2 00:00-24:00; 3 00:00-24:00; 4 00:00-24:00; 5 00:00-24:00; 6 00:00-24:00")</msNPConstraint>
    I removed 1 hour removed 1 hour for example to show xml effect
    look of denied is done: 1 00:00-02:00 03:00-24:00
    You can adjust to minutes in the XML not GUI.
  4. restore the NPS config from the edited XML file.
    netsh nps import filename="path\file.xml"

ps. In general - You can do a lot more in the XML even add things/attributes/rules that are not possible via GUI.

dump/restore reference: http://technet.microsoft.com/pl-pl/library/cc732059%28v=ws.10%29.aspx

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.