Network Policy Server, is a Microsoft RADIUS server for Windows Server 2008 and higher.

learn more… | top users | synonyms

0
votes
0answers
34 views

NPS/RADIUS authentication across one-way trust

I'm trying to set up Windows Network Policy Server to allow RADIUS authentication in a multiple forest scenario with one-way trusts. We have several domains (each in a single domain-forest) containing ...
0
votes
1answer
25 views

NPS and RHEL ssh configuration [closed]

We have setup windows NPS and RHEL radius client using pam_radius module from freeradius.org for ssh. But on a linux client I see the error pam_radius_auth: Got RADIUS response code 3 in ...
2
votes
1answer
92 views

EAP-TLS for Wireless with Active Directory

My question is more from a conceptual point of view, rather than implementation (even though I'm asking about proprietary protocols and products). Assuming I have users and credentials set up in my ...
0
votes
0answers
32 views

An error occured during the Network Policy Server use of Extensible Authentication Protocol

It has been almost two weeks to get my radius server up and running. I think i have run in almost to all the issue known to Radius :). Am guessing this to be a Certificate issue, Please go through ...
1
vote
0answers
11 views

Windows Server 2008 NPS Granular time

Like a previous poster I am configuring NPS as a RADIUS authentication source for my wireless clients. I need to impose a Time and Day restriction to the Network Policy that need to be more granular ...
0
votes
0answers
84 views

NPS Radius wireless authentication only for domain computers

Is it possibile to setup a Windows NPS role to grant only Domain PC to wireless access? I want to still check for a valid domain user account, but I would like to restrict access only to domain ...
1
vote
1answer
84 views

NPS server Active Directory registration & WIFI RADIUS

Background (I'm new to this, so bear with me): So, I set up an NPS server vm in an AD domain to try out RADIUS client WAPs. The NPS is installed alongside an AD CS server (enterprise, plus one ...
0
votes
0answers
97 views

Authenticating Cisco Phones EAP-TLS Windows NPS

We are using windows NPS server for radius authentication and would like our to set up 802.1x authentication on our phones using EAP-TLS. The NPS Server trusts the certificates (using the built in ...
2
votes
1answer
453 views

Cisco Voice VLAN with 802.1X Authentication

I've got a Cisco Catalyst 2960 that I'm trying to configure for a remote office with 802.1X wired authentication. The setup I'm going for is Switch -> VoIP Phone via Internal Switch -> ...
0
votes
0answers
146 views

RADIUS w/ NPS, Sonicwall, and Meru Wireless

EDITED 3/23: I've been trying to configure a DS/NPS->Sonicwall->Meru Controller>Client RADIUS Wifi solution and I haven't had much success on the sonicwall side. I've shortened all shared secrets to 8 ...
0
votes
0answers
152 views

Microsoft NPS Radius Proxy - Framed-IP-Address Empty

I'm trying to use Microsoft's NPS as a radius proxy, but for some reason it's not forwarding the Framed-IP-Attribute in the accounting requests. I have a Meru wireless controller, Smoothwall web ...
1
vote
0answers
53 views

Authenticating devices instead of users via PEAP/Radius

Our Cisco Aironet AP uses Radius to authenticate against our Active Directory via our Network Policy Server (NPS). For my users, on their domain-managed laptops and BYO devices (such as laptops, ...
1
vote
1answer
156 views

How do I use a domain account to connect to a MSSQL server for NPS accounting?

I'm trying to connect a Server 2008 R2 NPS to a MSSQL server for logging accounting data and I'm running into issues. I configured NPS Accounting through the "Configure Accounting" wizard and, using ...
2
votes
0answers
166 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
1
vote
2answers
204 views

How to “segregate” non-domain DHCP clients with Windows 2012 R2?

I search a way to prevent network access to devices not belonging to our corporate Active Directory domain. Some people connect their personnal laptops to our corporate network, and some of them ...
1
vote
0answers
119 views

NPS RADIUS authentication fails due to user account

We're in the process of migrating our wireless network, adding in 802.11x-based RADIUS authentication. The set up is as follows: Client connects to router01 Client authenticates through RADIUS on a ...
4
votes
0answers
43 views

How do I get as much debugging info as possible out of the Network Policy Server (ias) service?

We are trying to authenticate a client on remote vpn, through a Meraki Z1 teleworker appliance. The Z1 is sending a proper request, the Network Policy Server (ias) service is apparently ...
0
votes
0answers
219 views

win2008r2 NPS issue- authentication as user XXX but tries to access user XXX home folder as different user (YYY)

I have a NPS set up for Juniper dynamic vpn. I get thru the vpn tunnel succesfully but when trying to map user XXX folder using the correct login/pwd I get access denied, however I can access ...
0
votes
0answers
109 views

£ sign in password fails Windows NPS Radius authentication against Sonicwall SRA

We have a Sonicwall SRA server configured to authenticate users using RADIUS to a Windows NPS Server running on Windows Server 2012 R2. It all works fine EXCEPT when passwords contain the "£" ...
3
votes
0answers
83 views

SuperMicro IPMI using Windows-based RADIUS (NPS)

I'm struggling to use a Windows-based RADIUS setup (Network Policy Server) with SuperMicro IPMI interfaces. I've found that I need to add vendor-specific attribute H=4, I=4 (Appendix C in the ...
0
votes
0answers
355 views

How to handle 802.1x authentication system with incompatible clients devices?

I would like to split my wired network into multiple VLANs. In order to do that, I think I will use dot1x authentication on my Cisco Switchs (2960S and 2960G) RADIUS will be handle through NPS on my ...
2
votes
0answers
438 views

Cisco SG300 switch does not send RADIUS messages to server for 802.1x

I want to eventually configure the SG300 to authenticate wired clients with 802.1x and Microsoft NPS (RADIUS). I am currently testing this setup using a single port (Port 7) on my SG300, a test ...
1
vote
1answer
254 views

Setting up NPS with a certificate that is valid to both AD and non-AD machines

I'm trying to setup an AD server running the NPS service so that both AD and non-AD machines see the certificate as valid when authenticating to the wireless network. I picked up a cert from GoDaddy ...
2
votes
1answer
86 views

howto restrict active directory account for PEAP/non-CIFS only

We have some voip phones that we want to integrate into our PEAP WiFi network, and I'm concerned about just creating a standard AD account and using that. If someone got hold of such long-term account ...
4
votes
4answers
6k views

Authentication via RADIUS : MSCHAPv2 Error 691

I am working on setting up authentication into an Acme Packet Net-Net 3820 (SBC) via RADIUS. The accounting side of things is working just fine with no issues. The authentication side of things is ...
1
vote
2answers
391 views

Sonicwall SSO with NPS

I have a SonicWall where I want to enable the RADIUS SSO capability. The article for doing this states the RADIUS server Send the user’s IP address in either Framed-IP-Address or Calling-Station-Id ...
0
votes
0answers
2k views

MS NPS denying access, can't validate server certificate

At my office we use a Cisco WLC2504 wireless controller and starting about a week ago we started having problems with users connecting to one of our secure wireless network. We are running AD on ...
-1
votes
1answer
2k views

802.1x auth without certificate on clients

I'm trying to implement WPA-Enterprise authentication on my UniFi Controller (3.1.10) without the need for certificates on clients. My RADIUS server will be Windows Server 2012R2 with NPS role ...
1
vote
0answers
327 views

Server 2008 RADIUS on auth non-domain computers

I have read a few articles about the web regarding this, but I seem to be unable to find a definitive answer for my question. I have an Aruba Networks controller configured to hit a RADIUS server ...
2
votes
2answers
3k views

NPS - RADIUS - Active Directory Authentication

Is it possible to use NPS RADIUS as an intermediary between an application that only supports RADIUS authentication and an active directory server which is used for authentication across the network? ...
4
votes
0answers
290 views

Restrict access to RD Gateway based on IP

I'm trying to restrict who can access our RD Gateway based on both their group membership and IP address (so people in group A can only access the system from IP address X). The Network Policy Server ...
4
votes
3answers
495 views

How to prevent a user from being able to plug an XP machine into the network

We recently had an issue where a user brought their laptop in from home and plugged it into the network, attempting to get internet access. I know on a port level I could setup MAC restrictions, but ...
0
votes
1answer
450 views

Expired password change through VPN failure

I am setting up some new accounts to be used by some contractors. they are going to connect via VPN to our network. My requirement is to set the password initially and then have them change it the ...
0
votes
1answer
2k views

NPS Policy doesn't to respect the “Control access through NPS Policy” user attribute

I have a Win2K8 server with NPS. I am trying to set my VPN authentication on a FortiGate firewall to authorize users via Radius from my Windows server. I have two policies configured a Connection ...
6
votes
1answer
239 views

Network Policy Server Granular Time Restrictions

I am configuring NPS as a RADIUS authentication source for my wireless clients. I am trying to differentiate between school hours and after hours as I need to connect certain users to a different ...
0
votes
1answer
413 views

Using NPS to restrict access to WLAN

We currently have one WLAN that only domain users can connect to. We will be adding a guest WLAN and would like all non-domain machines to use this, even if a user has a domain account. We have set ...
3
votes
1answer
799 views

Registation or Guest VLAN for 802.1x via Microsoft NPS

I am currently working on a Microsoft NPS solution to provide 802.1x MAC authentication for wired and wireless clients along with providing a VLAN for the clients to be moved to. It currently works ...
1
vote
0answers
2k views

Migrated NPS won't serve a RADIUS client

I recently migrated NPS from one host running Windows Server 2012 Standard to another, using the TechNet instructions for migrating with different host names. While all my RADIUS clients were (and ...
0
votes
1answer
2k views

How to save event logs “Network Policy and Access Services” on NPS server

We have a Windows Server 2008 R2 Enterprise server with NPS role installed in it. (We dont use NAP). Is there any way, we can save all the event logs in------ Event Viewer -> Custom Views -> ...
1
vote
0answers
795 views

Server 2008 R2 NPS with Cisco 5500 WLC and Wireless Authentication

We are currently trying to move away from some outdated ACS appliances we have. A little background on the NPS server -- it is currently set up and being used for RADIUS authentication for our Cisco ...
2
votes
1answer
169 views

How to use different network policies for administrative logins and wireless users?

I'm using a RADIUS server (NPS on Windows 2008 R2) to centrally manage authentication for a bunch of Cisco devices, including switches and wireless access points; I'm currently using RADIUS to ...
0
votes
4answers
12k views

NPS EAP authentication failing after Windows Update

I have a Windows 2008 Std server running NPS. After applying the latest round of updates (including Root Certificates for April 2012 KB931125 (See:http://support.microsoft.com/kb/933430/)), EAP ...
2
votes
0answers
294 views

Macs to work on 802.1X wired network

We are in the process on 802.1X for all our wired clients. We are using NPS on Server 2008R2 as our Radius server. All our windows clients authenticate using just a computer certificate issued by our ...
2
votes
1answer
837 views

Configure VPN on ASA to log accounting via NPS

Currently we have VPN setup on an ASA 5510. I have it set to use NPS for RADIUS authentication, but I've never really configured much as far as accounting. I'm wanting to set this up to be able to ...
2
votes
1answer
2k views

Connect to a Windows Server 2008R2 using php, ldap, tls fails if server has NPS service

Servers: DALCON2 (Windows 2008R2, DC, NPS) DALCON3 (Windows 2008R2, DC) DALCON-WWW (Ubuntu server) Goal: From DALCON-WWW, using adLDAP with TLS to connect to a domain controller LDAP service If ...
1
vote
1answer
8k views

Network Policy Server authentication failing

I've configured our RADIUS client (pfSense) and Windows 2008 NPS for authentication via RADIUS. The set-up is a Captive portal where LAN users authenticate with Active Directory. When looking at our ...
1
vote
2answers
1k views

Windows XP will not connect to Enterprise Wireless

We run a Radius server (Windows Server 2008 R2 running NPS). My goal is to push out GPOs to wireless users with the network information. I am successfully doing this with Windows 7 clients, iOS ...
2
votes
2answers
13k views

Why would NPS suddenly stop authenticating users?

We use a computer running Windows Server 2008 (32-bit) with the RRAS and NPS roles to authenticate users for VPN and wireless access over RADIUS. This configuration has been working great for more ...
6
votes
1answer
4k views

Third Party Wildcard Certificates for use with Microsoft NPS / RADIUS / PEAP

I want to replace the SSL certificate that is used for PEAP on our NPS server that is doing RADIUS authentication for our Cisco WLCs. The current certificate is a SSL certificate that does Client ...
0
votes
3answers
421 views

Can't VPN into WS2008R2

I am a new administrator to Windows Server 2008 R2. I am trying to set up a VPN connection to my server with not much luck. Thus far I can connect to my server with a VPN PPTP connection but I ...