Network Policy Server, is a Microsoft RADIUS server for Windows Server 2008 and higher.

learn more… | top users | synonyms

0
votes
0answers
7 views

Do I need to have NPS configured in my Windows Domain?

NPS is Network Policy and Access Services, and is one of the roles that can be assigned to a Windows Server. I have a Windows domain with two subnets running over an MPLS. Each subnet has a Domain ...
1
vote
1answer
26 views

Microsoft NPS 2012 R2 - Can't perform authentication from Cisco ASA with PAP

I am trying to setup a Cisco ASA (version 9.1(7)6) to authenticate against a Microsoft Network Policy Server 2012 R2. The ASA is able to communicate with the NPS server, however the test aaa-server ...
0
votes
0answers
11 views

NPS with VLAN tagging not getting correct IP from DHCP

Surely I am doing something wrong here. I have setup a Wireless router to use WPA2-Enterprise and connect to a RADIUS server. I have NPS running on Windows 2008R2 Server. I have setup NPS in a way ...
0
votes
0answers
45 views

NPS RADIUS 802.1x and configuring for large number of VLAN-s

Problem I've got a network with large number of VLAN-s (200+), and ActiveDirectory with 2012R2 servers, with all users and computers. I've also got NPS RADIUS server setup, properly working with ...
1
vote
0answers
80 views

NAP clients are evaluated as non NAP-capable

The setup: Active Directory domain, Remote Desktop Gateway server, NPS/NAP server (all Windows Server 2008 R2) and a few Windows 7 clients. The RDG and NPS are set up and running with all Connection ...
0
votes
0answers
28 views

Local users - Modify group membership without “elevated” rights

I have a Microsoft NPS server that we are using for MAC Authentication in our network. This server is NOT domain joined. Due to contractual requirements, I am not allowed to have 'elevated' rights ...
1
vote
0answers
127 views

Radius server not responding to EAP requests

We are trying to setup a wifi environment using WPA2 security using Radius server and AD authentication. We've set up the radius server using the following guide: https://networklessons.com/wireless/...
1
vote
0answers
70 views

Use mail attribute for 802.1x RADIUS authenticatioon with Microsoft NPS

We have run a Cisco WiFi network that uses 802.1x to authentication logins against Active Directory. Employees login using their UPN prefix, and all works well. For various reasons we'd like users ...
0
votes
0answers
46 views

RADIUS servers at different sites (member servers at each site) - roles on each server

I have successfully set up a Windows Server SBS 2011 RADIUS server and it works well with our DrayTek router to authenticate domain joined workstations to our office wireless (so that only trusted ...
0
votes
0answers
8 views

NPS with Microtik Routerboard 750GL

I want to configure Microtik Routerboard 750GL with NPS to grant access to Internet for our wifi clients. Clients need to be authenticated via active directory using nps. I have configured routerboard ...
1
vote
0answers
17 views

Windows RADIUS approval

I'm in the process of rolling out WPA2 Enterprise and am trying to figure out how to allow mobile phones to use the network. Pushing out the config is easy with my MDM, but how do I tell NPS to allow ...
1
vote
0answers
199 views

NPS/RAIDUS Authentication for Wifi and certificates for non trusted server

I'm trying to setup an NPS server as RADIUS server for Wifi network of employers of my company. All mobile devices could connect to this networks using their domain user/pass. My problem is to let ...
1
vote
0answers
478 views

Windows Server 2012R2 RADIUS (wifi) clients won't accept bought wildcard certificate

I've been managing the NPS Server for a while and thought it was time to treat it a valid SSL certificate. The setup I bought a wildcard SSL certificate from comodo, compiled it to an .pfx ...
0
votes
1answer
110 views

Group Policy for restricting OU user to access 1 subnet

I run Windows 2008 R2 with AD, NPS. I have a OU call Wifi Only, I need every user in this OU can not access to any server in a specific VLAN Subnet 192.25.0.0/16 (isolate user) How can I achieve it....
0
votes
1answer
212 views

OATH TOTP with Windows NPS Server?

I'm trying to set up multi-factor authentication for AWS WorkSpaces using AD and OATH TOTP (e.g. Google Authenticator). In the AWS AD Connector config you can set up the RADIUS server's IP, port and ...
1
vote
0answers
201 views

Remote Desktop + Two Factor

My boss has asked me to come up with a way to implement dual factor authentication for RDP access to servers. So, when any of my fellow admins remotely log into a server via RDP they must go through ...
1
vote
2answers
500 views

What are the risks of adding third-party Root CA certificate into NTAuth Store?

What are the risks associated with import of third-party Root CA certificate into the Enterprise NTAuth Store in Windows domain except that the CA is then trusted to issue certificates? This is for ...
1
vote
2answers
54 views

Radius clients with different authentication criteria

I can't seem to find a good tutorial on how to set my network policy for one of my radius clients. I'd like my radclientA with policyA to authenticate and radclientB with policyB to authenticate. ...
0
votes
0answers
210 views

Server 2012 NPS Server not authenticating IKEv2 requests

I am having a weird problem regarding NPS Server when I upgraded my vpn servers from server 2008 R2 to Server 2012 R2. Actually in my infrasturcture I have a Windows 2008 R2 based AD and in its domain ...
1
vote
0answers
18 views

Network Policy not evaluated for forwarded authentications

I'm having a problem with NPS connection policies in combination with forwarded RADIUS requests - the connection policy does not seem to be evaluated? Our domain has several one-way trusts. I have a ...
0
votes
1answer
1k views

NPS/RADIUS authentication across one-way trust

I'm trying to set up Windows Network Policy Server to allow RADIUS authentication in a multiple forest scenario with one-way trusts. We have several domains (each in a single domain-forest) containing ...
0
votes
1answer
94 views

NPS and RHEL ssh configuration [closed]

We have setup windows NPS and RHEL radius client using pam_radius module from freeradius.org for ssh. But on a linux client I see the error pam_radius_auth: Got RADIUS response code 3 in /var/log/...
2
votes
1answer
354 views

EAP-TLS for Wireless with Active Directory

My question is more from a conceptual point of view, rather than implementation (even though I'm asking about proprietary protocols and products). Assuming I have users and credentials set up in my ...
0
votes
0answers
95 views

An error occured during the Network Policy Server use of Extensible Authentication Protocol

It has been almost two weeks to get my radius server up and running. I think i have run in almost to all the issue known to Radius :). Am guessing this to be a Certificate issue, Please go through ...
1
vote
0answers
28 views

Windows Server 2008 NPS Granular time

Like a previous poster I am configuring NPS as a RADIUS authentication source for my wireless clients. I need to impose a Time and Day restriction to the Network Policy that need to be more granular ...
1
vote
1answer
393 views

NPS server Active Directory registration & WIFI RADIUS

Background (I'm new to this, so bear with me): So, I set up an NPS server vm in an AD domain to try out RADIUS client WAPs. The NPS is installed alongside an AD CS server (enterprise, plus one ...
2
votes
1answer
2k views

Cisco Voice VLAN with 802.1X Authentication

I've got a Cisco Catalyst 2960 that I'm trying to configure for a remote office with 802.1X wired authentication. The setup I'm going for is Switch -> VoIP Phone via Internal Switch -> PC/...
0
votes
0answers
494 views

RADIUS w/ NPS, Sonicwall, and Meru Wireless

EDITED 3/23: I've been trying to configure a DS/NPS->Sonicwall->Meru Controller>Client RADIUS Wifi solution and I haven't had much success on the sonicwall side. I've shortened all shared secrets to 8 ...
1
vote
0answers
113 views

Authenticating devices instead of users via PEAP/Radius

Our Cisco Aironet AP uses Radius to authenticate against our Active Directory via our Network Policy Server (NPS). For my users, on their domain-managed laptops and BYO devices (such as laptops, ...
1
vote
2answers
528 views

How do I use a domain account to connect to a MSSQL server for NPS accounting?

I'm trying to connect a Server 2008 R2 NPS to a MSSQL server for logging accounting data and I'm running into issues. I configured NPS Accounting through the "Configure Accounting" wizard and, using ...
2
votes
1answer
706 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
1
vote
2answers
674 views

How to “segregate” non-domain DHCP clients with Windows 2012 R2?

I search a way to prevent network access to devices not belonging to our corporate Active Directory domain. Some people connect their personnal laptops to our corporate network, and some of them ...
1
vote
0answers
237 views

NPS RADIUS authentication fails due to user account

We're in the process of migrating our wireless network, adding in 802.11x-based RADIUS authentication. The set up is as follows: Client connects to router01 Client authenticates through RADIUS on a ...
5
votes
0answers
164 views

How do I get as much debugging info as possible out of the Network Policy Server (ias) service?

We are trying to authenticate a client on remote vpn, through a Meraki Z1 teleworker appliance. The Z1 is sending a proper request, the Network Policy Server (ias) service is apparently ...
1
vote
0answers
217 views

£ sign in password fails Windows NPS Radius authentication against Sonicwall SRA

We have a Sonicwall SRA server configured to authenticate users using RADIUS to a Windows NPS Server running on Windows Server 2012 R2. It all works fine EXCEPT when passwords contain the "£" ...
4
votes
0answers
194 views

SuperMicro IPMI using Windows-based RADIUS (NPS)

I'm struggling to use a Windows-based RADIUS setup (Network Policy Server) with SuperMicro IPMI interfaces. I've found that I need to add vendor-specific attribute H=4, I=4 (Appendix C in the ...
2
votes
0answers
900 views

Cisco SG300 switch does not send RADIUS messages to server for 802.1x

I want to eventually configure the SG300 to authenticate wired clients with 802.1x and Microsoft NPS (RADIUS). I am currently testing this setup using a single port (Port 7) on my SG300, a test ...
1
vote
1answer
475 views

Setting up NPS with a certificate that is valid to both AD and non-AD machines

I'm trying to setup an AD server running the NPS service so that both AD and non-AD machines see the certificate as valid when authenticating to the wireless network. I picked up a cert from GoDaddy ...
2
votes
1answer
142 views

howto restrict active directory account for PEAP/non-CIFS only

We have some voip phones that we want to integrate into our PEAP WiFi network, and I'm concerned about just creating a standard AD account and using that. If someone got hold of such long-term account ...
4
votes
4answers
12k views

Authentication via RADIUS : MSCHAPv2 Error 691

I am working on setting up authentication into an Acme Packet Net-Net 3820 (SBC) via RADIUS. The accounting side of things is working just fine with no issues. The authentication side of things is ...
1
vote
2answers
578 views

Sonicwall SSO with NPS

I have a SonicWall where I want to enable the RADIUS SSO capability. The article for doing this states the RADIUS server Send the user’s IP address in either Framed-IP-Address or Calling-Station-Id ...
1
vote
1answer
5k views

MS NPS denying access, can't validate server certificate

At my office we use a Cisco WLC2504 wireless controller and starting about a week ago we started having problems with users connecting to one of our secure wireless network. We are running AD on ...
0
votes
1answer
5k views

802.1x auth without certificate on clients

I'm trying to implement WPA-Enterprise authentication on my UniFi Controller (3.1.10) without the need for certificates on clients. My RADIUS server will be Windows Server 2012R2 with NPS role ...
1
vote
0answers
458 views

Server 2008 RADIUS on auth non-domain computers

I have read a few articles about the web regarding this, but I seem to be unable to find a definitive answer for my question. I have an Aruba Networks controller configured to hit a RADIUS server ...
2
votes
2answers
4k views

NPS - RADIUS - Active Directory Authentication

Is it possible to use NPS RADIUS as an intermediary between an application that only supports RADIUS authentication and an active directory server which is used for authentication across the network? ...
5
votes
1answer
431 views

Restrict access to RD Gateway based on IP

I'm trying to restrict who can access our RD Gateway based on both their group membership and IP address (so people in group A can only access the system from IP address X). The Network Policy Server ...
4
votes
3answers
639 views

How to prevent a user from being able to plug an XP machine into the network

We recently had an issue where a user brought their laptop in from home and plugged it into the network, attempting to get internet access. I know on a port level I could setup MAC restrictions, but ...
0
votes
1answer
648 views

Expired password change through VPN failure

I am setting up some new accounts to be used by some contractors. they are going to connect via VPN to our network. My requirement is to set the password initially and then have them change it the ...
0
votes
1answer
2k views

NPS Policy doesn't to respect the “Control access through NPS Policy” user attribute

I have a Win2K8 server with NPS. I am trying to set my VPN authentication on a FortiGate firewall to authorize users via Radius from my Windows server. I have two policies configured a Connection ...
7
votes
1answer
331 views

Network Policy Server Granular Time Restrictions

I am configuring NPS as a RADIUS authentication source for my wireless clients. I am trying to differentiate between school hours and after hours as I need to connect certain users to a different ...