Questions tagged [nps]
Network Policy Server, is a Microsoft RADIUS server for Windows Server 2008 and higher.
121
questions
0
votes
0
answers
17
views
NPS Certificate
I am changing a CA in the domain to a new one. The old CA will be deactivated.
I have an NPS server configured with the certificate of the old CA in "Network Policies -> Policy1 -> ...
- 29
-1
votes
0
answers
140
views
Windows 11 22H2 and NPS Enterprise WiFi
Working on a variation on the Windows 11 WiFi issues.
We have Group Policy and a CA server issuing certificates to users and computers. Windows 10 machines I can automatically join the secured WiFi ...
1
vote
0
answers
52
views
NPS Dynamic VLAN Catch-All
I have radius MAC authentication with dynamic VLAN setup on a WPA-PSK wireless network to easily put different IOT/VOIP devices on various networks that may not support our WPA-Enterprise network. ...
- 11
0
votes
0
answers
68
views
How do I use NPS templates with different IP addresses?
When creating RADIUS client templates in Network Policy Server, the IP Address field is mandatory. So, when RADIUS clients using that template, they all get the same IP address. This seems wrong.
Is ...
0
votes
0
answers
216
views
Certificates issue during RADIUS authentication using NPS server with PEAP MSCHAPv2
I am using NPS as a RADIUS server to authenticate some devices using PEAP MSCHAPv2.
I have an issue during the server authentication, I am using a chain of trust certificates, with 1 server cert, 1 ...
0
votes
0
answers
424
views
Windows NPS Logs - How to decode the class (25) attribute?
I'm wondering if there is a specific format for the "Class" attribute in Windows NPS logs.
Specifically, I'm looking at logs from Windows Server 2019 which are under %SystemRoot%\System32\...
1
vote
0
answers
414
views
Bypassing Network Policy Server with Azure AD Extension
I hope someone can help guide me here!
We have a RDS environment and introduced Azure MFA and built it successfully using the following guide here: https://learn.microsoft.com/en-us/azure/active-...
- 158
1
vote
1
answer
8k
views
Still suffering from Windows NPS May 2022 Certficate Update
in May 2022 Microsoft changed the way that client certificates are mapped to AD accounts, causing 802.1X EAP-TLS computer account authentication to stop working.
Here is an additional resource with ...
- 171
0
votes
2
answers
321
views
OTP before password with pam_radius and NPS
I have successfully configured pam_radius on a Ubuntu client so that users are asked for an OTP. The radius server is an NPS with Azure MFA extension. The OTP is checked against Azure.
It works well, ...
- 200
2
votes
0
answers
22
views
NPS policy for external firm?
Can NPS be used in the following scenario:
We (FIRM-A) are sharing some office space with another firm (FIRM-B). We would like their laptops to connect to our "Internet Only" SSID. Those ...
0
votes
0
answers
341
views
Securing Windows Server NPS/SSTP
Looking at our NPS logs I see we're getting hammered; some online actor is doing a brute force on various login names and passwords.
In general this isn't an issue... yet. It doesn't appear that a ...
- 381
0
votes
0
answers
1k
views
Windows NPS refusing all network policies or ignoring correct credentials
I have a AD-joined Windows Server 2019 Standard with NPS installed and AD connected.
When I try to RADIUS authenticate it always fails and this is unfixable so far.
The RADIUS Clients are configured ...
- 123
0
votes
1
answer
919
views
Check MS-PEAP-Certificate by opening a connection (using Powershell or any other environment)
We are running an NPS-Server on Windows Server 2016 that serves as a Radius-Server for our wifi-network.
A few days ago, all clients lost the connection because the validity of the certificate in use ...
- 393
0
votes
1
answer
2k
views
802.1x Wireless with certificates for AADJ/Intune devices without user affinity
I can setup certificate distribution and wireless profiles in Intune for devices with user affinity and this works fine. The user account is synchronised with our on site AD server and NPS has an ...
1
vote
1
answer
4k
views
Laptop asking for "action needed" on NPS Computer auth WiFi connect, despite valid Server Thumbprint
I have configured computer authentication on WiFi connect to company network, using the microsoft nps server, group policy certificate auto-enrollment and group-policy wifi config.
Has been working ...
- 1,154
1
vote
0
answers
2k
views
802.1x NPS Machine authentication
We are trying to implement 802.1x to authenticate wirelless users (Aruba Controller) through RADIUS (Windows server 2019 NPS),
For mobile phones and guests devices, we have successfully configured the ...
0
votes
1
answer
914
views
NPS Radius Configuration EAP-Ms-Chapv2
I'm tryng to fix my Microsoft Server 2016 Network Policy Server configuration as radius server, with PEAP-MSChapv2.
As well known some modern devices are not able to "not validate" server ...
- 11
0
votes
1
answer
511
views
On Premise NPS server check computer account in Azure AD
I've got a Windows based NPS Radius server for authenticating my wireless clients based on device certificates (supplied by my internal CA). In my NPS network policy I have set conditions to grant ...
1
vote
0
answers
236
views
Windows Server 2019 NPS PEAP not working with Internal CA, But works with self signed
i've got trouble with NPS on 1 of my customers sites which wont authenticate with EAP when using the internal CA certificates. I've tried 4-6 variation of the internal certificate to no avail..
NPS ...
- 11
1
vote
0
answers
50
views
Use Nps Server as MFA middleware
My company uses NPS Server and Microsoft Authenticator app to facilitate two factor authentication for RDP connections. We are Windows Server 2016 and Azure Active Directory.
Would it be possible to ...
- 111
2
votes
0
answers
482
views
Network Policy Server rule does not match users from trusted domain when in a nested group
TL;DR: Just look at the image linked below.
User group membership diagram
We have an RD Gateway and Network Policy Server, both running on Windows Server 2012 R2 in an environment with forest ...
- 21
0
votes
1
answer
1k
views
Failed To Authenticate To NPS Server
I am running an NPS Server on my Windows Server 2019 of my network. I use it to authenticate into my Cisco C9300 switches as an administrator to work on them. Recently I am unable to login as it says ...
- 825
0
votes
2
answers
809
views
Radius Authentication error between Active Directory NPS - Aruba 2930f
I am trying to configure Radius authentification using NPS backend. I have configured both ends but it does not seem to work.I am not sure if this is even correct. Kindly help.
NPS Config:
I have ...
- 101
0
votes
1
answer
1k
views
Obtaining IP Address when Using NPS/RADIUS with existing lease from Windows DHCP
Problem: I have DHCP clients on a Windows AD network contoso.local, that often can't get an IP address after successfully authenticating over the RADIUS/NPS Server. I found that if the device has an ...
- 1
2
votes
2
answers
25k
views
No NPS (Network Policy Server) Event Logs
Running into something very painful. We use Microsoft's Network Policy Server, and need the Network Policy Server security event subcategory to work - specifically, event id 6273 and 6272. NPS works,...
- 182
2
votes
1
answer
137
views
Issue with Powershell script not filtering by date
I've put together this powershell function to basically pull events from the NPS log (Specifically denied authentication attempts) from the last point the script was run (the $date variable), sort out ...
- 25
0
votes
0
answers
450
views
Can NPS, RADIUS, and 802.1x Assign Multiple VLANs To A Single User?
I will be using Network Policy Server (NPS) with a RADIUS server to assign each user to a VLAN when they successfully authenticate to the network using 802.1x. In Active Directory Directory Services (...
- 227
3
votes
1
answer
708
views
Is a Windows Server CAL needed for IEEE 802.1x MAC authentication bypass?
We want to deploy IEEE 802.1X port-based authentication for specific devices by means of MAC authentication bypass. For this, we must enter the MAC address of the device as username and password in ...
- 31
1
vote
1
answer
1k
views
Behaviour of authentication when using multiple Radius servers on RRAS
I've tried looking this up for hours but my google-fu is failing me it seems.
The question is rather simple, if I configure multiple Radius servers in RRAS, if they're all ballanced equally, how are ...
0
votes
1
answer
305
views
802.1x and NPS to secure wired intranet
I want to secure our network from unmanaged device (for example a user brings a laptop from home and connects it to a port in a meeting room).
As far as I understood I can use 802.1x and a RADIUS ...
- 1
0
votes
1
answer
206
views
RADIUS configurations on Server 2008 R2 - WiFi issue
I have configured WiFi authentication on FortiGate 100D through RADIUS on Windows server 2008 R2.
When I'm trying to connect to the wifi from a PC (Win 10), it works only when I check "Use my Windows ...
- 1
1
vote
1
answer
2k
views
Use CHAP with NPS and a Domain Controller in Core
I've noticed a difference on the authentication behavior of Active Directory where the Core version failed to authenticate properly when using CHAP from the NPS server.
I have reproduct the problem ...
- 163
1
vote
0
answers
138
views
IPAM could not collect login event from Windows Server 2016 NPS
We have one IPAM server ( installed on Windows server 2016 ) in my Network. We have 4 NPS servers. two of them are Windows server 2012R2 and other two are Windows Server 2016. IPAM server could ...
- 11
3
votes
3
answers
8k
views
strongswan IKEv2 VPN + RADIUS authentication with NPS in Active Directory domain
I've managed to get strongswan running with eap-mschapv2 authentication using a server certificate. Now I want to try and use the eap-radius plugin with NPS running on a Windows 2012 R2 server to ...
- 83
1
vote
1
answer
2k
views
802.1x and windows 10 domain authentication
Our site has had this problem for over a year now...(off and on).
After PXE imaging a computer via network MAB authentication, the image finishes fine, but once it gets on the domain via the ...
- 93
0
votes
1
answer
948
views
RADIUS Will Not Authenticate For Console & SSH
I am trying to RADIUS authenticate on my HP ProCurve 2910al W14.38 with both console and SSH.
My show authentication shows the following:
Access Task | Login Primary Login Secondary Enable ...
- 825
1
vote
1
answer
3k
views
Is it possible to host a RADIUS server on Windows 7 [closed]
Is it possible to host a RADIUS server on Windows 7.
I am trying to use this as an authenticating server for my Routers. A third-party application is fine, however maybe if its possible it can use ...
- 13
2
votes
0
answers
373
views
802.1x WiFi computer (cert) auth against 2008 R2 or 2012 R2 NPS succeeds, fails against 2016 NPS
We have a Meraki wireless infrastructure using 802.1x to authenticate Windows clients against MS Network Policy Server using certificates issued by our internal root CA. The root cert and wireless ...
- 21
0
votes
1
answer
4k
views
Different Windows DHCP scopes on a single network?
Before I joined the company I work at, someone decided to make use of the 10.150.0.0/16 range for the company LAN (despite the company not having nearly that many devices). I think their idea at the ...
- 381
0
votes
1
answer
8k
views
How do I configure NPS to allow connections from domain-joined computers only?
I've created a new NPS network policy with the following settings:
Overview
- Policy Enabled
- Grant access
- Type: Remote Access Server (VPN-Dial up)
Conditions
- Machine Group: Domain ...
- 890
3
votes
1
answer
10k
views
Missing roles in Windows Server 2016
I'm trying to install the NPS role on Windows Server 2016 (Datacenter) but neither Server Manager nor Install-Windows feature seem to be aware of its existence:
PS > Install-WindowsFeature NPAS -...
0
votes
1
answer
182
views
RADIUS server on VPN set up
Just a quick question, hoping for a quick answer. I'm studying for my MCSA and I'm a little confused about RADIUS. Currently I have a VPN server set up with RRAS and NPS on my home server lab. Does ...
- 19
0
votes
3
answers
12k
views
Windows 10 won't connect to RRAS VPN
Studying MCSA, currently working on a Server 2012 R2 server lab I have set up on a custom built computer.
Current configuration, I have a host computer that is just that, a host, with RRAS installed ...
- 19
1
vote
1
answer
630
views
802.1x Wifi with Disabled AD Account
I have setup an NPS Server (Windows Server 2016) which uses RADIUS to allow my users to authenticate against AD for their Wireless Connections.
When I disable an account in AD, NPS will not allow the ...
- 31
8
votes
1
answer
13k
views
My GoDaddy! certificate is not trusted by iOS devices but it is trusted by Android and Windows devices
I’ve deployed some Radius servers (Windows Server 2012 R2 with NPS).
They use PEAP-MSCHAP-V2 for authentication with a SAN Go Daddy Certificate. They are deployed in order to handle Wi-Fi connections....
- 83
0
votes
1
answer
65
views
Can I demand both MAC and credentials to access network using MS RADIUS server?
Is is possible to demand both of these types of authorization? I know Microsoft NPS can use MAC address or credentials to approve access however can I demand both of these simultaneously?
Thanks, ...
- 3
1
vote
0
answers
604
views
802.1x Wifi with NPS Server, using EAP-PEAP and a certificate for Authentication
I don't know if what I am trying to do is possible but here we go.
I have a bunch of iPad's that I am going to supervise before they go on to my network. The iPad's will connect to the wifi via 802....
- 255
4
votes
2
answers
3k
views
Control which certificate an NPS network policy selects when the certificate is auto-renewed
I have multiple NPS network policies using Microsoft PEAP with a self-signed certificate. When our internal CA automatically renews the certificate, all of the network policies switch to another (it ...
- 3,132
0
votes
1
answer
10k
views
2FA with Windows NPS
I would like to set up two-factor authentication for my Wireless users.
I have an Windows NPS server that is currently authenticating my wireless users and I want to add certificates or any other ...
- 341
1
vote
0
answers
547
views
Server 2008 Radius stopped working
i've had a working 2008 Server with NPS as a Radius Server running for authentication of wifi devices, VPN Connections and Logins from Cisco devices.
Suddenly the server stopped responding.
- No ...
- 11