Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [nps]

Network Policy Server, is a Microsoft RADIUS server for Windows Server 2008 and higher.

Filter by
Sorted by
Tagged with
0 votes
0 answers
9 views

RADIUS NPS Proxy certificate based authentication

Is it possible to configure an NPS RADIUS proxy to accept/forward computer certificates as authentication/call station ID? Previous setup was to push network profile through GPO to use computer ...
user avatar
0 votes
0 answers
50 views

Windows NPS refusing all network policies or ignoring correct credentials

I have a AD-joined Windows Server 2019 Standard with NPS installed and AD connected. When I try to RADIUS authenticate it always fails and this is unfixable so far. The RADIUS Clients are configured ...
user avatar
  • 93
0 votes
1 answer
36 views

Check MS-PEAP-Certificate by opening a connection (using Powershell or any other environment)

We are running an NPS-Server on Windows Server 2016 that serves as a Radius-Server for our wifi-network. A few days ago, all clients lost the connection because the validity of the certificate in use ...
user avatar
  • 393
0 votes
0 answers
42 views

802.1x Wireless with certificates for AADJ/Intune devices without user affinity

I can setup certificate distribution and wireless profiles in Intune for devices with user affinity and this works fine. The user account is synchronised with our on site AD server and NPS has an ...
user avatar
0 votes
0 answers
18 views

Network Policy Server policies for different Active Directory Groups

I am trying to configure a Network Policy for our OpenVPN server to authenticate using our Radius servers. Our radius servers currently have a bunch of radius clients configured, we use them for ...
user avatar
0 votes
1 answer
307 views

Laptop asking for "action needed" on NPS Computer auth WiFi connect, despite valid Server Thumbprint

I have configured computer authentication on WiFi connect to company network, using the microsoft nps server, group policy certificate auto-enrollment and group-policy wifi config. Has been working ...
user avatar
  • 944
1 vote
0 answers
368 views

802.1x NPS Machine authentication

We are trying to implement 802.1x to authenticate wirelless users (Aruba Controller) through RADIUS (Windows server 2019 NPS), For mobile phones and guests devices, we have successfully configured the ...
user avatar
0 votes
0 answers
102 views

Authenticate with Azure MFA NPS extension

On a custom software (that act like a RADIUS client), I want to authenticate with MFA on my Azure AD. I follow the guide https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-...
user avatar
0 votes
1 answer
332 views

NPS Radius Configuration EAP-Ms-Chapv2

I'm tryng to fix my Microsoft Server 2016 Network Policy Server configuration as radius server, with PEAP-MSChapv2. As well known some modern devices are not able to "not validate" server ...
user avatar
  • 1
0 votes
0 answers
47 views

Windows server RRAS filtering traffic

So, can anyone explain me what is the difference between RRAS Static Filters, Windows Server Firewall and NPS regarding the filtering traffic for RA VPN clients and traffic designated for VPN server ...
user avatar
  • 103
0 votes
0 answers
283 views

Microsoft NPS auth failure with reason code 23: advice for advanced troubleshooting techniques?

In our enterprise, we have roughly 30 users that access our networks through a VPN connection. The topology, is as follows: Apple End User Device ( iOS, macOS ) <--> Juniper SRX Firewall <--&...
user avatar
  • 111
0 votes
0 answers
184 views

NPS Event 6273 Reason 7 "The specified domain does not exist."

Our AD domain is domain.pri and our UPN is user@domain.com. Normally this works fine. We have a Win2008 NPS server for RADIUS WLC authentication that we want to replace with a 2019 box. Seemed ...
user avatar
0 votes
1 answer
216 views

On Premise NPS server check computer account in Azure AD

I've got a Windows based NPS Radius server for authenticating my wireless clients based on device certificates (supplied by my internal CA). In my NPS network policy I have set conditions to grant ...
user avatar
1 vote
0 answers
70 views

Windows Server 2019 NPS PEAP not working with Internal CA, But works with self signed

i've got trouble with NPS on 1 of my customers sites which wont authenticate with EAP when using the internal CA certificates. I've tried 4-6 variation of the internal certificate to no avail.. NPS ...
user avatar
1 vote
0 answers
22 views

Use Nps Server as MFA middleware

My company uses NPS Server and Microsoft Authenticator app to facilitate two factor authentication for RDP connections. We are Windows Server 2016 and Azure Active Directory. Would it be possible to ...
user avatar
  • 111
2 votes
0 answers
108 views

Network Policy Server rule does not match users from trusted domain when in a nested group

TL;DR: Just look at the image linked below. User group membership diagram We have an RD Gateway and Network Policy Server, both running on Windows Server 2012 R2 in an environment with forest ...
user avatar
0 votes
1 answer
643 views

Failed To Authenticate To NPS Server

I am running an NPS Server on my Windows Server 2019 of my network. I use it to authenticate into my Cisco C9300 switches as an administrator to work on them. Recently I am unable to login as it says ...
user avatar
  • 761
0 votes
2 answers
519 views

Radius Authentication error between Active Directory NPS - Aruba 2930f

I am trying to configure Radius authentification using NPS backend. I have configured both ends but it does not seem to work.I am not sure if this is even correct. Kindly help. NPS Config: I have ...
user avatar
  • 101
0 votes
1 answer
352 views

Obtaining IP Address when Using NPS/RADIUS with existing lease from Windows DHCP

Problem: I have DHCP clients on a Windows AD network contoso.local, that often can't get an IP address after successfully authenticating over the RADIUS/NPS Server. I found that if the device has an ...
user avatar
  • 1
2 votes
1 answer
17k views

No NPS (Network Policy Server) Event Logs

Running into something very painful. We use Microsoft's Network Policy Server, and need the Network Policy Server security event subcategory to work - specifically, event id 6273 and 6272. NPS works,...
user avatar
2 votes
1 answer
91 views

Issue with Powershell script not filtering by date

I've put together this powershell function to basically pull events from the NPS log (Specifically denied authentication attempts) from the last point the script was run (the $date variable), sort out ...
user avatar
0 votes
0 answers
259 views

Can NPS, RADIUS, and 802.1x Assign Multiple VLANs To A Single User?

I will be using Network Policy Server (NPS) with a RADIUS server to assign each user to a VLAN when they successfully authenticate to the network using 802.1x. In Active Directory Directory Services (...
user avatar
3 votes
1 answer
448 views

Is a Windows Server CAL needed for IEEE 802.1x MAC authentication bypass?

We want to deploy IEEE 802.1X port-based authentication for specific devices by means of MAC authentication bypass. For this, we must enter the MAC address of the device as username and password in ...
user avatar
  • 31
1 vote
1 answer
666 views

Behaviour of authentication when using multiple Radius servers on RRAS

I've tried looking this up for hours but my google-fu is failing me it seems. The question is rather simple, if I configure multiple Radius servers in RRAS, if they're all ballanced equally, how are ...
user avatar
0 votes
1 answer
62 views

802.1x and NPS to secure wired intranet

I want to secure our network from unmanaged device (for example a user brings a laptop from home and connects it to a port in a meeting room). As far as I understood I can use 802.1x and a RADIUS ...
user avatar
0 votes
1 answer
171 views

RADIUS configurations on Server 2008 R2 - WiFi issue

I have configured WiFi authentication on FortiGate 100D through RADIUS on Windows server 2008 R2. When I'm trying to connect to the wifi from a PC (Win 10), it works only when I check "Use my Windows ...
user avatar
  • 1
1 vote
1 answer
1k views

Use CHAP with NPS and a Domain Controller in Core

I've noticed a difference on the authentication behavior of Active Directory where the Core version failed to authenticate properly when using CHAP from the NPS server. I have reproduct the problem ...
user avatar
  • 153
1 vote
0 answers
111 views

IPAM could not collect login event from Windows Server 2016 NPS

We have one IPAM server ( installed on Windows server 2016 ) in my Network. We have 4 NPS servers. two of them are Windows server 2012R2 and other two are Windows Server 2016. IPAM server could ...
user avatar
3 votes
3 answers
6k views

strongswan IKEv2 VPN + RADIUS authentication with NPS in Active Directory domain

I've managed to get strongswan running with eap-mschapv2 authentication using a server certificate. Now I want to try and use the eap-radius plugin with NPS running on a Windows 2012 R2 server to ...
user avatar
1 vote
1 answer
2k views

802.1x and windows 10 domain authentication

Our site has had this problem for over a year now...(off and on). After PXE imaging a computer via network MAB authentication, the image finishes fine, but once it gets on the domain via the ...
user avatar
0 votes
1 answer
570 views

RADIUS Will Not Authenticate For Console & SSH

I am trying to RADIUS authenticate on my HP ProCurve 2910al W14.38 with both console and SSH. My show authentication shows the following: Access Task | Login Primary Login Secondary Enable ...
user avatar
  • 761
1 vote
1 answer
3k views

Is it possible to host a RADIUS server on Windows 7 [closed]

Is it possible to host a RADIUS server on Windows 7. I am trying to use this as an authenticating server for my Routers. A third-party application is fine, however maybe if its possible it can use ...
user avatar
  • 13
2 votes
0 answers
323 views

802.1x WiFi computer (cert) auth against 2008 R2 or 2012 R2 NPS succeeds, fails against 2016 NPS

We have a Meraki wireless infrastructure using 802.1x to authenticate Windows clients against MS Network Policy Server using certificates issued by our internal root CA. The root cert and wireless ...
user avatar
  • 21
0 votes
1 answer
4k views

Different Windows DHCP scopes on a single network?

Before I joined the company I work at, someone decided to make use of the 10.150.0.0/16 range for the company LAN (despite the company not having nearly that many devices). I think their idea at the ...
user avatar
  • 325
0 votes
1 answer
7k views

How do I configure NPS to allow connections from domain-joined computers only?

I've created a new NPS network policy with the following settings: Overview - Policy Enabled - Grant access - Type: Remote Access Server (VPN-Dial up) Conditions - Machine Group: Domain ...
user avatar
  • 859
3 votes
1 answer
9k views

Missing roles in Windows Server 2016

I'm trying to install the NPS role on Windows Server 2016 (Datacenter) but neither Server Manager nor Install-Windows feature seem to be aware of its existence: PS > Install-WindowsFeature NPAS -...
user avatar
0 votes
1 answer
148 views

RADIUS server on VPN set up

Just a quick question, hoping for a quick answer. I'm studying for my MCSA and I'm a little confused about RADIUS. Currently I have a VPN server set up with RRAS and NPS on my home server lab. Does ...
user avatar
  • 19
0 votes
3 answers
11k views

Windows 10 won't connect to RRAS VPN

Studying MCSA, currently working on a Server 2012 R2 server lab I have set up on a custom built computer. Current configuration, I have a host computer that is just that, a host, with RRAS installed ...
user avatar
  • 19
1 vote
1 answer
465 views

802.1x Wifi with Disabled AD Account

I have setup an NPS Server (Windows Server 2016) which uses RADIUS to allow my users to authenticate against AD for their Wireless Connections. When I disable an account in AD, NPS will not allow the ...
user avatar
  • 31
8 votes
1 answer
12k views

My GoDaddy! certificate is not trusted by iOS devices but it is trusted by Android and Windows devices

I’ve deployed some Radius servers (Windows Server 2012 R2 with NPS). They use PEAP-MSCHAP-V2 for authentication with a SAN Go Daddy Certificate. They are deployed in order to handle Wi-Fi connections....
user avatar
  • 83
0 votes
1 answer
60 views

Can I demand both MAC and credentials to access network using MS RADIUS server?

Is is possible to demand both of these types of authorization? I know Microsoft NPS can use MAC address or credentials to approve access however can I demand both of these simultaneously? Thanks, ...
user avatar
1 vote
0 answers
511 views

802.1x Wifi with NPS Server, using EAP-PEAP and a certificate for Authentication

I don't know if what I am trying to do is possible but here we go. I have a bunch of iPad's that I am going to supervise before they go on to my network. The iPad's will connect to the wifi via 802....
user avatar
  • 255
2 votes
2 answers
2k views

Control which certificate an NPS network policy selects when the certificate is auto-renewed

I have multiple NPS network policies using Microsoft PEAP with a self-signed certificate. When our internal CA automatically renews the certificate, all of the network policies switch to another (it ...
user avatar
0 votes
1 answer
9k views

2FA with Windows NPS

I would like to set up two-factor authentication for my Wireless users. I have an Windows NPS server that is currently authenticating my wireless users and I want to add certificates or any other ...
user avatar
  • 323
1 vote
0 answers
529 views

Server 2008 Radius stopped working

i've had a working 2008 Server with NPS as a Radius Server running for authentication of wifi devices, VPN Connections and Logins from Cisco devices. Suddenly the server stopped responding. - No ...
user avatar
5 votes
1 answer
6k views

Providing High Availability for NPS

I need to ensure high availability for RADIUS service in Windows Server environment so it can withstand loss or even temporary downtime of any particular server holding NPS role. Most of technet ...
user avatar
0 votes
1 answer
220 views

Do I need to have NPS configured in my Windows Domain?

NPS is Network Policy and Access Services, and is one of the roles that can be assigned to a Windows Server. I have a Windows domain with two subnets running over an MPLS. Each subnet has a Domain ...
user avatar
  • 706
3 votes
1 answer
3k views

Microsoft NPS 2012 R2 - Can't perform authentication from Cisco ASA with PAP

I am trying to setup a Cisco ASA (version 9.1(7)6) to authenticate against a Microsoft Network Policy Server 2012 R2. The ASA is able to communicate with the NPS server, however the test aaa-server ...
user avatar
  • 309
1 vote
0 answers
3k views

NAP clients are evaluated as non NAP-capable

The setup: Active Directory domain, Remote Desktop Gateway server, NPS/NAP server (all Windows Server 2008 R2) and a few Windows 7 clients. The RDG and NPS are set up and running with all Connection ...
user avatar
1 vote
0 answers
2k views

Radius server not responding to EAP requests

We are trying to setup a wifi environment using WPA2 security using Radius server and AD authentication. We've set up the radius server using the following guide: https://networklessons.com/wireless/...
user avatar
  • 11