Network Policy Server, is a Microsoft RADIUS server for Windows Server 2008 and higher.

learn more… | top users | synonyms

7
votes
1answer
289 views

Network Policy Server Granular Time Restrictions

I am configuring NPS as a RADIUS authentication source for my wireless clients. I am trying to differentiate between school hours and after hours as I need to connect certain users to a different ...
6
votes
1answer
5k views

Third Party Wildcard Certificates for use with Microsoft NPS / RADIUS / PEAP

I want to replace the SSL certificate that is used for PEAP on our NPS server that is doing RADIUS authentication for our Cisco WLCs. The current certificate is a SSL certificate that does Client ...
4
votes
3answers
582 views

How to prevent a user from being able to plug an XP machine into the network

We recently had an issue where a user brought their laptop in from home and plugged it into the network, attempting to get internet access. I know on a port level I could setup MAC restrictions, but ...
4
votes
0answers
93 views

How do I get as much debugging info as possible out of the Network Policy Server (ias) service?

We are trying to authenticate a client on remote vpn, through a Meraki Z1 teleworker appliance. The Z1 is sending a proper request, the Network Policy Server (ias) service is apparently ...
4
votes
0answers
144 views

SuperMicro IPMI using Windows-based RADIUS (NPS)

I'm struggling to use a Windows-based RADIUS setup (Network Policy Server) with SuperMicro IPMI interfaces. I've found that I need to add vendor-specific attribute H=4, I=4 (Appendix C in the ...
4
votes
4answers
9k views

Authentication via RADIUS : MSCHAPv2 Error 691

I am working on setting up authentication into an Acme Packet Net-Net 3820 (SBC) via RADIUS. The accounting side of things is working just fine with no issues. The authentication side of things is ...
4
votes
0answers
360 views

Restrict access to RD Gateway based on IP

I'm trying to restrict who can access our RD Gateway based on both their group membership and IP address (so people in group A can only access the system from IP address X). The Network Policy Server ...
3
votes
2answers
15k views

Why would NPS suddenly stop authenticating users?

We use a computer running Windows Server 2008 (32-bit) with the RRAS and NPS roles to authenticate users for VPN and wireless access over RADIUS. This configuration has been working great for more ...
3
votes
2answers
2k views

Remote administer Network Policy Server

In our domain I have a Windows Server 2008 R2 machine "GWY" with the Network Policy and Access Services role installed. From this machine I can open the Network Policy Server management console to ...
3
votes
1answer
933 views

Registation or Guest VLAN for 802.1x via Microsoft NPS

I am currently working on a Microsoft NPS solution to provide 802.1x MAC authentication for wired and wireless clients along with providing a VLAN for the clients to be moved to. It currently works ...
2
votes
2answers
3k views

NPS - RADIUS - Active Directory Authentication

Is it possible to use NPS RADIUS as an intermediary between an application that only supports RADIUS authentication and an active directory server which is used for authentication across the network? ...
2
votes
2answers
5k views

Problem with network policy rule in Network Policy Server

Trying to configure RADIUS for a college network, and have run into the following frustration: I can't set an "AND" condition for group membership of authenticated objects in the network policy ...
2
votes
1answer
267 views

EAP-TLS for Wireless with Active Directory

My question is more from a conceptual point of view, rather than implementation (even though I'm asking about proprietary protocols and products). Assuming I have users and credentials set up in my ...
2
votes
1answer
12k views

How to integrate Windows Server 2008 R2's NPS with Cisco switches?

I need to evaluate in a lab environment the use of Windows Server 2008 R2's NPS for 802.1x authentication with Cisco Catalyst 3750 switches; the general idea is to only let clients connect to the ...
2
votes
2answers
3k views

Monitoring a service that runs as svchost with nagios

What was IAS in Server 03 is now Network Policy Server (NPS) in Server 08. I was able to monitor the service in 03, but have been unsuccessful in figuring out how to in 08. The path to executable ...
2
votes
1answer
917 views

Configure VPN on ASA to log accounting via NPS

Currently we have VPN setup on an ASA 5510. I have it set to use NPS for RADIUS authentication, but I've never really configured much as far as accounting. I'm wanting to set this up to be able to ...
2
votes
1answer
493 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
2
votes
1answer
128 views

howto restrict active directory account for PEAP/non-CIFS only

We have some voip phones that we want to integrate into our PEAP WiFi network, and I'm concerned about just creating a standard AD account and using that. If someone got hold of such long-term account ...
2
votes
1answer
176 views

How to use different network policies for administrative logins and wireless users?

I'm using a RADIUS server (NPS on Windows 2008 R2) to centrally manage authentication for a bunch of Cisco devices, including switches and wireless access points; I'm currently using RADIUS to ...
2
votes
1answer
2k views

Connect to a Windows Server 2008R2 using php, ldap, tls fails if server has NPS service

Servers: DALCON2 (Windows 2008R2, DC, NPS) DALCON3 (Windows 2008R2, DC) DALCON-WWW (Ubuntu server) Goal: From DALCON-WWW, using adLDAP with TLS to connect to a domain controller LDAP service If ...
2
votes
1answer
1k views

Cisco Voice VLAN with 802.1X Authentication

I've got a Cisco Catalyst 2960 that I'm trying to configure for a remote office with 802.1X wired authentication. The setup I'm going for is Switch -> VoIP Phone via Internal Switch -> ...
2
votes
0answers
668 views

Cisco SG300 switch does not send RADIUS messages to server for 802.1x

I want to eventually configure the SG300 to authenticate wired clients with 802.1x and Microsoft NPS (RADIUS). I am currently testing this setup using a single port (Port 7) on my SG300, a test ...
2
votes
0answers
310 views

Macs to work on 802.1X wired network

We are in the process on 802.1X for all our wired clients. We are using NPS on Server 2008R2 as our Radius server. All our windows clients authenticate using just a computer certificate issued by our ...
2
votes
1answer
1k views

network policy + WPA enterprise (tkip) Windows 2008 R2

hi I've attempted the following guide and in a bit of a pickle. http://techblog.mirabito.net.au/?p=87 My main goal is to have a username / password based wireless authentication with active directory ...
1
vote
2answers
478 views

How to “segregate” non-domain DHCP clients with Windows 2012 R2?

I search a way to prevent network access to devices not belonging to our corporate Active Directory domain. Some people connect their personnal laptops to our corporate network, and some of them ...
1
vote
2answers
38k views

Cannot connect to a VPN server - authentication failed with error code 691

When trying to connect to a VPN server, I get the 691 error code on the client, which say: Error Description: 691: The remote connection was denied because the user name and password ...
1
vote
2answers
510 views

Sonicwall SSO with NPS

I have a SonicWall where I want to enable the RADIUS SSO capability. The article for doing this states the RADIUS server Send the user’s IP address in either Framed-IP-Address or Calling-Station-Id ...
1
vote
2answers
2k views

Windows XP will not connect to Enterprise Wireless

We run a Radius server (Windows Server 2008 R2 running NPS). My goal is to push out GPOs to wireless users with the network information. I am successfully doing this with Windows 7 clients, iOS ...
1
vote
2answers
228 views

What are the risks of adding third-party Root CA certificate into NTAuth Store?

What are the risks associated with import of third-party Root CA certificate into the Enterprise NTAuth Store in Windows domain except that the CA is then trusted to issue certificates? This is for ...
1
vote
1answer
366 views

Setting up NPS with a certificate that is valid to both AD and non-AD machines

I'm trying to setup an AD server running the NPS service so that both AD and non-AD machines see the certificate as valid when authenticating to the wireless network. I picked up a cert from GoDaddy ...
1
vote
1answer
3k views

MS NPS denying access, can't validate server certificate

At my office we use a Cisco WLC2504 wireless controller and starting about a week ago we started having problems with users connecting to one of our secure wireless network. We are running AD on ...
1
vote
1answer
10k views

Network Policy Server authentication failing

I've configured our RADIUS client (pfSense) and Windows 2008 NPS for authentication via RADIUS. The set-up is a Captive portal where LAN users authenticate with Active Directory. When looking at our ...
1
vote
3answers
3k views

NPS wont run or install, error code 0x80070643

Installing NPS results in the error below: attempt to install network policy server failed with error code 0x80070643 fatal error during installation The SBS server ran an update on Friday and ...
1
vote
0answers
15 views

Windows RADIUS approval

I'm in the process of rolling out WPA2 Enterprise and am trying to figure out how to allow mobile phones to use the network. Pushing out the config is easy with my MDM, but how do I tell NPS to allow ...
1
vote
0answers
122 views

NPS/RAIDUS Authentication for Wifi and certificates for non trusted server

I'm trying to setup an NPS server as RADIUS server for Wifi network of employers of my company. All mobile devices could connect to this networks using their domain user/pass. My problem is to let ...
1
vote
0answers
146 views

Remote Desktop + Two Factor

My boss has asked me to come up with a way to implement dual factor authentication for RDP access to servers. So, when any of my fellow admins remotely log into a server via RDP they must go through ...
1
vote
2answers
34 views

Radius clients with different authentication criteria

I can't seem to find a good tutorial on how to set my network policy for one of my radius clients. I'd like my radclientA with policyA to authenticate and radclientB with policyB to authenticate. ...
1
vote
0answers
16 views

Network Policy not evaluated for forwarded authentications

I'm having a problem with NPS connection policies in combination with forwarded RADIUS requests - the connection policy does not seem to be evaluated? Our domain has several one-way trusts. I have a ...
1
vote
0answers
25 views

Windows Server 2008 NPS Granular time

Like a previous poster I am configuring NPS as a RADIUS authentication source for my wireless clients. I need to impose a Time and Day restriction to the Network Policy that need to be more granular ...
1
vote
1answer
250 views

NPS server Active Directory registration & WIFI RADIUS

Background (I'm new to this, so bear with me): So, I set up an NPS server vm in an AD domain to try out RADIUS client WAPs. The NPS is installed alongside an AD CS server (enterprise, plus one ...
1
vote
0answers
101 views

Authenticating devices instead of users via PEAP/Radius

Our Cisco Aironet AP uses Radius to authenticate against our Active Directory via our Network Policy Server (NPS). For my users, on their domain-managed laptops and BYO devices (such as laptops, ...
1
vote
1answer
352 views

How do I use a domain account to connect to a MSSQL server for NPS accounting?

I'm trying to connect a Server 2008 R2 NPS to a MSSQL server for logging accounting data and I'm running into issues. I configured NPS Accounting through the "Configure Accounting" wizard and, using ...
1
vote
0answers
188 views

NPS RADIUS authentication fails due to user account

We're in the process of migrating our wireless network, adding in 802.11x-based RADIUS authentication. The set up is as follows: Client connects to router01 Client authenticates through RADIUS on a ...
1
vote
0answers
169 views

£ sign in password fails Windows NPS Radius authentication against Sonicwall SRA

We have a Sonicwall SRA server configured to authenticate users using RADIUS to a Windows NPS Server running on Windows Server 2012 R2. It all works fine EXCEPT when passwords contain the "£" ...
1
vote
0answers
397 views

Server 2008 RADIUS on auth non-domain computers

I have read a few articles about the web regarding this, but I seem to be unable to find a definitive answer for my question. I have an Aruba Networks controller configured to hit a RADIUS server ...
1
vote
0answers
3k views

Migrated NPS won't serve a RADIUS client

I recently migrated NPS from one host running Windows Server 2012 Standard to another, using the TechNet instructions for migrating with different host names. While all my RADIUS clients were (and ...
1
vote
0answers
869 views

Server 2008 R2 NPS with Cisco 5500 WLC and Wireless Authentication

We are currently trying to move away from some outdated ACS appliances we have. A little background on the NPS server -- it is currently set up and being used for RADIUS authentication for our Cisco ...
1
vote
0answers
95 views

What is a “remote access profile” in RAS?

I am trying to understand how RRAS and NPS work together so I can see if it would make sense to implement the two in our environment and I see references in one of the Sybex books using the term ...
1
vote
0answers
1k views

802.1x authentication against an Active Directory with a trusted Kerberos realm

I am attempting to use Windows Server 2008 NPS to provide 802.1x authentication against our Cisco switches. The set-up works fine for local domain users, I am now attempting to integrate it with an ...
0
votes
4answers
14k views

NPS EAP authentication failing after Windows Update

I have a Windows 2008 Std server running NPS. After applying the latest round of updates (including Root Certificates for April 2012 KB931125 (See:http://support.microsoft.com/kb/933430/)), EAP ...