Questions tagged [nps]

Network Policy Server, is a Microsoft RADIUS server for Windows Server 2008 and higher.

Filter by
Sorted by
Tagged with
0
votes
0answers
54 views

NPS Error 34 The user or computer account that is specified in the RADIUS Access-Request

I ran into a problem while deploying PEAP on NPS. My log file now says guest instead of my testuseracc and I get the error The user or computer account that is specified in the RADIUS Access-Request. ...
0
votes
0answers
25 views

Intune SCEP Profile + NDES Error

I'm currently trying to deploy WPA2 Enterprise over a NPS + NDES Server and rolling out the Profiles and Cert with Intune. It all works OK except for my SCEP Profile, which only shows "Error" in ...
1
vote
1answer
822 views

No NPS (Network Policy Server) Event Logs

Running into something very painful. We use Microsoft's Network Policy Server, and need the Network Policy Server security event subcategory to work - specifically, event id 6273 and 6272. NPS works,...
0
votes
0answers
15 views

Check existing certificate using Windows NPS (network policy server)

At the moment, we have a simple NPS policy that checks if the computer is a member of a AD machine group. Our Azure AD joined (non hybrid) devices pool is growing and those clearly are no members of ...
2
votes
1answer
74 views

Issue with Powershell script not filtering by date

I've put together this powershell function to basically pull events from the NPS log (Specifically denied authentication attempts) from the last point the script was run (the $date variable), sort out ...
0
votes
0answers
22 views

Portmapper issue with server using NFS [duplicate]

I received an email from a German service (cert-bund.de) telling me that my servers had a portmapper service (portmap, rpcbind) publicly available. (Subject: [CB-Report#20191125-XXXXXXX] Offene ...
0
votes
0answers
88 views

Can NPS, RADIUS, and 802.1x Assign Multiple VLANs To A Single User?

I will be using Network Policy Server (NPS) with a RADIUS server to assign each user to a VLAN when they successfully authenticate to the network using 802.1x. In Active Directory Directory Services (...
3
votes
1answer
156 views

Is a Windows Server CAL needed for IEEE 802.1x MAC authentication bypass?

We want to deploy IEEE 802.1X port-based authentication for specific devices by means of MAC authentication bypass. For this, we must enter the MAC address of the device as username and password in ...
0
votes
0answers
385 views

Windows 10 wired 802.1x supplicant behavior with EAP-TLS

I have a Windows 10 supplicant authenticating against a Windows 2012R2 NPS server (RADIUS). Clients authenticate using EAP-TLS without any problem, so I know it works. The client settings are set to ...
0
votes
0answers
16 views

Maximum key length on Microsoft Network Policy Server?

Working with Microsoft Network Policy Server version 6.3.9600.16384 I am only able to get a 63 character key to work for authorization between the NPS server and Dell switches. I can't find the ...
1
vote
1answer
199 views

Behaviour of authentication when using multiple Radius servers on RRAS

I've tried looking this up for hours but my google-fu is failing me it seems. The question is rather simple, if I configure multiple Radius servers in RRAS, if they're all ballanced equally, how are ...
0
votes
0answers
224 views

Windows Server 2019 + Radius + trusted certificate

I have Radius (NPS) service on the Windows Server 2019. I want to use it for wireless users authentication in an Active Directory. I tried to use self signed certificate. And users authenticated ...
0
votes
0answers
235 views

Freeradius can not authen to server NPS

I have user account on Active Directory (AD) connect to Freeradius via Network Policy Server (NPS). In radius server I config file like this. File: /etc/freeradius/3.0/mods-enabled/mschap-new mschap ...
0
votes
0answers
46 views

8021.x EAP-TLS linux supplicant NPS windows server

My POC's environment : 1 server MS2016 AD, 1 server MS2016 ADCS, 1 server MS2016 NPS (radius server 1 switch aruba 2930F (authenticathor) workstation : windows 10 and CentOs 7.6 (supplicants) Only ...
0
votes
1answer
39 views

802.1x and NPS to secure wired intranet

I want to secure our network from unmanaged device (for example a user brings a laptop from home and connects it to a port in a meeting room). As far as I understood I can use 802.1x and a RADIUS ...
0
votes
0answers
110 views

RADIUS Server won't authenticate user with MAC in “Verify Caller ID”

I have a domain Controller with RADIUS server installed in. The problem I face is, Users can be authenticated if their "Dial-In" Verify Caller-ID is disabled but as soon it is provided with MAC ...
1
vote
0answers
19 views

Certification Authority not issuing the right certificates for SCEP client

I'm doing certificate-based WiFi authentication (EAP-TLS). I have set up the CA server and in MMC console, I have added the certificate snap-in. In the certificate authority console, I've duplicated a ...
0
votes
1answer
139 views

RADIUS configurations on Server 2008 R2 - WiFi issue

I have configured WiFi authentication on FortiGate 100D through RADIUS on Windows server 2008 R2. When I'm trying to connect to the wifi from a PC (Win 10), it works only when I check "Use my Windows ...
1
vote
1answer
599 views

Use CHAP with NPS and a Domain Controller in Core

I've noticed a difference on the authentication behavior of Active Directory where the Core version failed to authenticate properly when using CHAP from the NPS server. I have reproduct the problem ...
1
vote
0answers
88 views

IPAM could not collect login event from Windows Server 2016 NPS

We have one IPAM server ( installed on Windows server 2016 ) in my Network. We have 4 NPS servers. two of them are Windows server 2012R2 and other two are Windows Server 2016. IPAM server could ...
3
votes
3answers
4k views

strongswan IKEv2 VPN + RADIUS authentication with NPS in Active Directory domain

I've managed to get strongswan running with eap-mschapv2 authentication using a server certificate. Now I want to try and use the eap-radius plugin with NPS running on a Windows 2012 R2 server to ...
1
vote
1answer
1k views

802.1x and windows 10 domain authentication

Our site has had this problem for over a year now...(off and on). After PXE imaging a computer via network MAB authentication, the image finishes fine, but once it gets on the domain via the ...
0
votes
1answer
189 views

RADIUS Will Not Authenticate For Console & SSH

I am trying to RADIUS authenticate on my HP ProCurve 2910al W14.38 with both console and SSH. My show authentication shows the following: Access Task | Login Primary Login Secondary Enable ...
1
vote
1answer
2k views

Is it possible to host a RADIUS server on Windows 7 [closed]

Is it possible to host a RADIUS server on Windows 7. I am trying to use this as an authenticating server for my Routers. A third-party application is fine, however maybe if its possible it can use ...
2
votes
0answers
243 views

802.1x WiFi computer (cert) auth against 2008 R2 or 2012 R2 NPS succeeds, fails against 2016 NPS

We have a Meraki wireless infrastructure using 802.1x to authenticate Windows clients against MS Network Policy Server using certificates issued by our internal root CA. The root cert and wireless ...
0
votes
1answer
3k views

Different Windows DHCP scopes on a single network?

Before I joined the company I work at, someone decided to make use of the 10.150.0.0/16 range for the company LAN (despite the company not having nearly that many devices). I think their idea at the ...
0
votes
1answer
3k views

How do I configure NPS to allow connections from domain-joined computers only?

I've created a new NPS network policy with the following settings: Overview - Policy Enabled - Grant access - Type: Remote Access Server (VPN-Dial up) Conditions - Machine Group: Domain ...
3
votes
1answer
7k views

Missing roles in Windows Server 2016

I'm trying to install the NPS role on Windows Server 2016 (Datacenter) but neither Server Manager nor Install-Windows feature seem to be aware of its existence: PS > Install-WindowsFeature NPAS -...
0
votes
1answer
114 views

RADIUS server on VPN set up

Just a quick question, hoping for a quick answer. I'm studying for my MCSA and I'm a little confused about RADIUS. Currently I have a VPN server set up with RRAS and NPS on my home server lab. Does ...
0
votes
3answers
7k views

Windows 10 won't connect to RRAS VPN

Studying MCSA, currently working on a Server 2012 R2 server lab I have set up on a custom built computer. Current configuration, I have a host computer that is just that, a host, with RRAS installed ...
1
vote
1answer
357 views

802.1x Wifi with Disabled AD Account

I have setup an NPS Server (Windows Server 2016) which uses RADIUS to allow my users to authenticate against AD for their Wireless Connections. When I disable an account in AD, NPS will not allow the ...
7
votes
1answer
9k views

My GoDaddy! certificate is not trusted by iOS devices but it is trusted by Android and Windows devices

I’ve deployed some Radius servers (Windows Server 2012 R2 with NPS). They use PEAP-MSCHAP-V2 for authentication with a SAN Go Daddy Certificate. They are deployed in order to handle Wi-Fi connections....
0
votes
1answer
58 views

Can I demand both MAC and credentials to access network using MS RADIUS server?

Is is possible to demand both of these types of authorization? I know Microsoft NPS can use MAC address or credentials to approve access however can I demand both of these simultaneously? Thanks, ...
1
vote
0answers
439 views

802.1x Wifi with NPS Server, using EAP-PEAP and a certificate for Authentication

I don't know if what I am trying to do is possible but here we go. I have a bunch of iPad's that I am going to supervise before they go on to my network. The iPad's will connect to the wifi via 802....
2
votes
1answer
881 views

Control which certificate an NPS network policy selects when the certificate is auto-renewed

I have multiple NPS network policies using Microsoft PEAP with a self-signed certificate. When our internal CA automatically renews the certificate, all of the network policies switch to another (it ...
0
votes
1answer
6k views

2FA with Windows NPS

I would like to set up two-factor authentication for my Wireless users. I have an Windows NPS server that is currently authenticating my wireless users and I want to add certificates or any other ...
1
vote
0answers
484 views

Server 2008 Radius stopped working

i've had a working 2008 Server with NPS as a Radius Server running for authentication of wifi devices, VPN Connections and Logins from Cisco devices. Suddenly the server stopped responding. - No ...
5
votes
1answer
5k views

Providing High Availability for NPS

I need to ensure high availability for RADIUS service in Windows Server environment so it can withstand loss or even temporary downtime of any particular server holding NPS role. Most of technet ...
0
votes
1answer
205 views

Do I need to have NPS configured in my Windows Domain?

NPS is Network Policy and Access Services, and is one of the roles that can be assigned to a Windows Server. I have a Windows domain with two subnets running over an MPLS. Each subnet has a Domain ...
2
votes
1answer
2k views

Microsoft NPS 2012 R2 - Can't perform authentication from Cisco ASA with PAP

I am trying to setup a Cisco ASA (version 9.1(7)6) to authenticate against a Microsoft Network Policy Server 2012 R2. The ASA is able to communicate with the NPS server, however the test aaa-server ...
1
vote
0answers
2k views

NAP clients are evaluated as non NAP-capable

The setup: Active Directory domain, Remote Desktop Gateway server, NPS/NAP server (all Windows Server 2008 R2) and a few Windows 7 clients. The RDG and NPS are set up and running with all Connection ...
1
vote
0answers
1k views

Radius server not responding to EAP requests

We are trying to setup a wifi environment using WPA2 security using Radius server and AD authentication. We've set up the radius server using the following guide: https://networklessons.com/wireless/...
1
vote
0answers
497 views

Use mail attribute for 802.1x RADIUS authenticatioon with Microsoft NPS

We have run a Cisco WiFi network that uses 802.1x to authentication logins against Active Directory. Employees login using their UPN prefix, and all works well. For various reasons we'd like users ...
1
vote
0answers
27 views

Windows RADIUS approval

I'm in the process of rolling out WPA2 Enterprise and am trying to figure out how to allow mobile phones to use the network. Pushing out the config is easy with my MDM, but how do I tell NPS to allow ...
1
vote
1answer
2k views

NPS/RAIDUS Authentication for Wifi and certificates for non trusted server

I'm trying to setup an NPS server as RADIUS server for Wifi network of employers of my company. All mobile devices could connect to this networks using their domain user/pass. My problem is to let ...
2
votes
0answers
5k views

Windows Server 2012R2 RADIUS (wifi) clients won't accept bought wildcard certificate

I've been managing the NPS Server for a while and thought it was time to treat it a valid SSL certificate. The setup I bought a wildcard SSL certificate from comodo, compiled it to an .pfx ...
0
votes
1answer
775 views

Group Policy for restricting OU user to access 1 subnet

I run Windows 2008 R2 with AD, NPS. I have a OU call Wifi Only, I need every user in this OU can not access to any server in a specific VLAN Subnet 192.25.0.0/16 (isolate user) How can I achieve it....
0
votes
1answer
810 views

OATH TOTP with Windows NPS Server?

I'm trying to set up multi-factor authentication for AWS WorkSpaces using AD and OATH TOTP (e.g. Google Authenticator). In the AWS AD Connector config you can set up the RADIUS server's IP, port and ...
3
votes
2answers
4k views

What are the risks of adding third-party Root CA certificate into NTAuth Store?

What are the risks associated with import of third-party Root CA certificate into the Enterprise NTAuth Store in Windows domain except that the CA is then trusted to issue certificates? This is for ...
1
vote
2answers
154 views

Radius clients with different authentication criteria

I can't seem to find a good tutorial on how to set my network policy for one of my radius clients. I'd like my radclientA with policyA to authenticate and radclientB with policyB to authenticate. ...