Questions tagged [nps]

Network Policy Server, is a Microsoft RADIUS server for Windows Server 2008 and higher.

Filter by
Sorted by
Tagged with
0
votes
0answers
5 views

On Premise NPS server check computer account in Azure AD

I've got a Windows based NPS Radius server for authenticating my wireless clients based on device certificates (supplied by my internal CA). In my NPS network policy I have set conditions to grant ...
0
votes
0answers
11 views

Authenticate users from domain A to domain B (non trusted) with NPS / Radius

Simple question please. I have an domain A with users/computers working. I have an domain B with only one file server and a DC for this domain behind an firewall appliance. Domain are not trusted and ...
1
vote
0answers
18 views

Windows Server 2019 NPS PEAP not working with Internal CA, But works with self signed

i've got trouble with NPS on 1 of my customers sites which wont authenticate with EAP when using the internal CA certificates. I've tried 4-6 variation of the internal certificate to no avail.. NPS ...
1
vote
0answers
14 views

Use Nps Server as MFA middleware

My company uses NPS Server and Microsoft Authenticator app to facilitate two factor authentication for RDP connections. We are Windows Server 2016 and Azure Active Directory. Would it be possible to ...
0
votes
0answers
15 views

While you are setting up Azure VPN with Windows Radius server, why you don't need to enroll a server certicate in the Windows Radius server?

According to MS's NPS documents: With PEAP-MS-CHAP v2, PEAP-TLS, or EAP-TLS as the authentication method, the NPS must use a server certificate that meets the minimum server certificate requirements. ...
0
votes
0answers
17 views

Wireless Radius Authentication to allow Laptops to use in 2 Forests with Selective Authentication

This sounds a bit complicated but I will try my best to explain. We have 2 AD forests (DOMA and DOMB) joined by inter-forest trust with selection authentication Each forest has their own NPS (NPSA ...
2
votes
0answers
30 views

Network Policy Server rule does not match users from trusted domain when in a nested group

TL;DR: Just look at the image linked below. User group membership diagram We have an RD Gateway and Network Policy Server, both running on Windows Server 2012 R2 in an environment with forest ...
0
votes
0answers
16 views

Windows service in Datacenter 2019 that block ports apart from Windows Defender Firewall

this is my first post here in Serverfault :) Please excuse me if I post in the wrong section. I wonder if anyone has any input on my current troubleshooting area. I have an AWS server instances with ...
0
votes
0answers
67 views

EAP Tunnels & WPA3 Certificate Requirement Changes with “Do not validate” and Windows NPS

There are changes afoot to certificate validation requirements from the Wi-Fi Alliance WPA3 standard (e.g. Do Not Validate is no longer an option). These are already being pushed out by Google for ...
1
vote
1answer
103 views

Failed To Authenticate To NPS Server

I am running an NPS Server on my Windows Server 2019 of my network. I use it to authenticate into my Cisco C9300 switches as an administrator to work on them. Recently I am unable to login as it says ...
0
votes
2answers
180 views

Radius Authentication error between Active Directory NPS - Aruba 2930f

I am trying to configure Radius authentification using NPS backend. I have configured both ends but it does not seem to work.I am not sure if this is even correct. Kindly help. NPS Config: I have ...
0
votes
0answers
11 views

Changes to Network Policy Server not saving

We've been upgrading hundreds of RADIUS client shared secrets, and have been noticing that about 1/4 of the updated passwords are reverting back to the old secret after an hour or so. Has anyone ...
0
votes
1answer
132 views

Obtaining IP Address when Using NPS/RADIUS with existing lease from Windows DHCP

Problem: I have DHCP clients on a Windows AD network contoso.local, that often can't get an IP address after successfully authenticating over the RADIUS/NPS Server. I found that if the device has an ...
0
votes
0answers
20 views

WPA2 Enterprise and RADIUS setup

I'm trying to set up WPA2 Enterprise with Radius server in our company. I would like to force everyone to use their domain email and password to log in to WiFi instead of just password. Notebooks ...
0
votes
0answers
92 views

802.1x RADIUS Clients not receiving Access-Accept

I'm running Network Policy Server on a Windows Server with the latest updates. The authentication method is PEAP with MS-CHAP-v2. A few weeks ago, everything was working fine but now our wireless ...
0
votes
0answers
292 views

Restricting access to specific IP address on RRAS VPN using NPS

I am trying to specify the IP addresses that users connected to my L2TP VPN (RRAS) are allowed to connect to. For example, I want to ensure that users in the group "Developers" can connect ...
0
votes
0answers
28 views

Control multi login in NPS window server 2019

i have NPS in my windows server 2019 and i config it as radius server for my Mikrotik router for vpn connection. i have one problem i don't want user able to make two connection as one username. for ...
2
votes
1answer
8k views

No NPS (Network Policy Server) Event Logs

Running into something very painful. We use Microsoft's Network Policy Server, and need the Network Policy Server security event subcategory to work - specifically, event id 6273 and 6272. NPS works,...
2
votes
1answer
80 views

Issue with Powershell script not filtering by date

I've put together this powershell function to basically pull events from the NPS log (Specifically denied authentication attempts) from the last point the script was run (the $date variable), sort out ...
0
votes
0answers
147 views

Can NPS, RADIUS, and 802.1x Assign Multiple VLANs To A Single User?

I will be using Network Policy Server (NPS) with a RADIUS server to assign each user to a VLAN when they successfully authenticate to the network using 802.1x. In Active Directory Directory Services (...
3
votes
1answer
287 views

Is a Windows Server CAL needed for IEEE 802.1x MAC authentication bypass?

We want to deploy IEEE 802.1X port-based authentication for specific devices by means of MAC authentication bypass. For this, we must enter the MAC address of the device as username and password in ...
1
vote
1answer
452 views

Behaviour of authentication when using multiple Radius servers on RRAS

I've tried looking this up for hours but my google-fu is failing me it seems. The question is rather simple, if I configure multiple Radius servers in RRAS, if they're all ballanced equally, how are ...
0
votes
1answer
45 views

802.1x and NPS to secure wired intranet

I want to secure our network from unmanaged device (for example a user brings a laptop from home and connects it to a port in a meeting room). As far as I understood I can use 802.1x and a RADIUS ...
0
votes
1answer
150 views

RADIUS configurations on Server 2008 R2 - WiFi issue

I have configured WiFi authentication on FortiGate 100D through RADIUS on Windows server 2008 R2. When I'm trying to connect to the wifi from a PC (Win 10), it works only when I check "Use my Windows ...
1
vote
1answer
866 views

Use CHAP with NPS and a Domain Controller in Core

I've noticed a difference on the authentication behavior of Active Directory where the Core version failed to authenticate properly when using CHAP from the NPS server. I have reproduct the problem ...
1
vote
0answers
94 views

IPAM could not collect login event from Windows Server 2016 NPS

We have one IPAM server ( installed on Windows server 2016 ) in my Network. We have 4 NPS servers. two of them are Windows server 2012R2 and other two are Windows Server 2016. IPAM server could ...
3
votes
3answers
5k views

strongswan IKEv2 VPN + RADIUS authentication with NPS in Active Directory domain

I've managed to get strongswan running with eap-mschapv2 authentication using a server certificate. Now I want to try and use the eap-radius plugin with NPS running on a Windows 2012 R2 server to ...
1
vote
1answer
2k views

802.1x and windows 10 domain authentication

Our site has had this problem for over a year now...(off and on). After PXE imaging a computer via network MAB authentication, the image finishes fine, but once it gets on the domain via the ...
0
votes
1answer
315 views

RADIUS Will Not Authenticate For Console & SSH

I am trying to RADIUS authenticate on my HP ProCurve 2910al W14.38 with both console and SSH. My show authentication shows the following: Access Task | Login Primary Login Secondary Enable ...
1
vote
1answer
3k views

Is it possible to host a RADIUS server on Windows 7 [closed]

Is it possible to host a RADIUS server on Windows 7. I am trying to use this as an authenticating server for my Routers. A third-party application is fine, however maybe if its possible it can use ...
2
votes
0answers
281 views

802.1x WiFi computer (cert) auth against 2008 R2 or 2012 R2 NPS succeeds, fails against 2016 NPS

We have a Meraki wireless infrastructure using 802.1x to authenticate Windows clients against MS Network Policy Server using certificates issued by our internal root CA. The root cert and wireless ...
0
votes
1answer
3k views

Different Windows DHCP scopes on a single network?

Before I joined the company I work at, someone decided to make use of the 10.150.0.0/16 range for the company LAN (despite the company not having nearly that many devices). I think their idea at the ...
0
votes
1answer
5k views

How do I configure NPS to allow connections from domain-joined computers only?

I've created a new NPS network policy with the following settings: Overview - Policy Enabled - Grant access - Type: Remote Access Server (VPN-Dial up) Conditions - Machine Group: Domain ...
3
votes
1answer
9k views

Missing roles in Windows Server 2016

I'm trying to install the NPS role on Windows Server 2016 (Datacenter) but neither Server Manager nor Install-Windows feature seem to be aware of its existence: PS > Install-WindowsFeature NPAS -...
0
votes
1answer
129 views

RADIUS server on VPN set up

Just a quick question, hoping for a quick answer. I'm studying for my MCSA and I'm a little confused about RADIUS. Currently I have a VPN server set up with RRAS and NPS on my home server lab. Does ...
0
votes
3answers
9k views

Windows 10 won't connect to RRAS VPN

Studying MCSA, currently working on a Server 2012 R2 server lab I have set up on a custom built computer. Current configuration, I have a host computer that is just that, a host, with RRAS installed ...
1
vote
1answer
390 views

802.1x Wifi with Disabled AD Account

I have setup an NPS Server (Windows Server 2016) which uses RADIUS to allow my users to authenticate against AD for their Wireless Connections. When I disable an account in AD, NPS will not allow the ...
8
votes
1answer
10k views

My GoDaddy! certificate is not trusted by iOS devices but it is trusted by Android and Windows devices

I’ve deployed some Radius servers (Windows Server 2012 R2 with NPS). They use PEAP-MSCHAP-V2 for authentication with a SAN Go Daddy Certificate. They are deployed in order to handle Wi-Fi connections....
0
votes
1answer
58 views

Can I demand both MAC and credentials to access network using MS RADIUS server?

Is is possible to demand both of these types of authorization? I know Microsoft NPS can use MAC address or credentials to approve access however can I demand both of these simultaneously? Thanks, ...
1
vote
0answers
473 views

802.1x Wifi with NPS Server, using EAP-PEAP and a certificate for Authentication

I don't know if what I am trying to do is possible but here we go. I have a bunch of iPad's that I am going to supervise before they go on to my network. The iPad's will connect to the wifi via 802....
2
votes
1answer
1k views

Control which certificate an NPS network policy selects when the certificate is auto-renewed

I have multiple NPS network policies using Microsoft PEAP with a self-signed certificate. When our internal CA automatically renews the certificate, all of the network policies switch to another (it ...
0
votes
1answer
8k views

2FA with Windows NPS

I would like to set up two-factor authentication for my Wireless users. I have an Windows NPS server that is currently authenticating my wireless users and I want to add certificates or any other ...
1
vote
0answers
514 views

Server 2008 Radius stopped working

i've had a working 2008 Server with NPS as a Radius Server running for authentication of wifi devices, VPN Connections and Logins from Cisco devices. Suddenly the server stopped responding. - No ...
5
votes
1answer
6k views

Providing High Availability for NPS

I need to ensure high availability for RADIUS service in Windows Server environment so it can withstand loss or even temporary downtime of any particular server holding NPS role. Most of technet ...
0
votes
1answer
210 views

Do I need to have NPS configured in my Windows Domain?

NPS is Network Policy and Access Services, and is one of the roles that can be assigned to a Windows Server. I have a Windows domain with two subnets running over an MPLS. Each subnet has a Domain ...
3
votes
1answer
2k views

Microsoft NPS 2012 R2 - Can't perform authentication from Cisco ASA with PAP

I am trying to setup a Cisco ASA (version 9.1(7)6) to authenticate against a Microsoft Network Policy Server 2012 R2. The ASA is able to communicate with the NPS server, however the test aaa-server ...
1
vote
0answers
3k views

NAP clients are evaluated as non NAP-capable

The setup: Active Directory domain, Remote Desktop Gateway server, NPS/NAP server (all Windows Server 2008 R2) and a few Windows 7 clients. The RDG and NPS are set up and running with all Connection ...
1
vote
0answers
2k views

Radius server not responding to EAP requests

We are trying to setup a wifi environment using WPA2 security using Radius server and AD authentication. We've set up the radius server using the following guide: https://networklessons.com/wireless/...
1
vote
0answers
569 views

Use mail attribute for 802.1x RADIUS authenticatioon with Microsoft NPS

We have run a Cisco WiFi network that uses 802.1x to authentication logins against Active Directory. Employees login using their UPN prefix, and all works well. For various reasons we'd like users ...
1
vote
0answers
27 views

Windows RADIUS approval

I'm in the process of rolling out WPA2 Enterprise and am trying to figure out how to allow mobile phones to use the network. Pushing out the config is easy with my MDM, but how do I tell NPS to allow ...