Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [nps]

Network Policy Server, is a Microsoft RADIUS server for Windows Server 2008 and higher.

0
votes
1answer
71 views

RADIUS configurations on Server 2008 R2 - WiFi issue

I have configured WiFi authentication on FortiGate 100D through RADIUS on Windows server 2008 R2. When I'm trying to connect to the wifi from a PC (Win 10), it works only when I check "Use my Windows ...
1
vote
1answer
126 views

Use CHAP with NPS and a Domain Controller in Core

I've noticed a difference on the authentication behavior of Active Directory where the Core version failed to authenticate properly when using CHAP from the NPS server. I have reproduct the problem ...
0
votes
0answers
38 views

Server certificate validation 802.1x

I have recently deployed CA and NPS for WPA2-Enterprise authentication. However doing the pen testing I found out that clients are accepting a certificate from any valid certificate authority. This is ...
0
votes
0answers
19 views

Wifi authentication with NPS while I'm adding a new computer in domain

I would like to use Machine certificate for Wifi WPA-Enterprise authentication of my company. For new PCs I need another method, just for domain admins to add PCs to domain, with their username and ...
1
vote
0answers
43 views

IPAM could not collect login event from Windows Server 2016 NPS

We have one IPAM server ( installed on Windows server 2016 ) in my Network. We have 4 NPS servers. two of them are Windows server 2012R2 and other two are Windows Server 2016. IPAM server could ...
0
votes
0answers
17 views

Network Policy Server logging and reporting

I have a Network Policy Server that authenticates users through Meraki Cloud VPN, through RADIUS. We want to produce reports/logs that show when a user logged in and how long they are logged in. I ...
0
votes
2answers
2k views

strongswan IKEv2 VPN + RADIUS authentication with NPS in Active Directory domain

I've managed to get strongswan running with eap-mschapv2 authentication using a server certificate. Now I want to try and use the eap-radius plugin with NPS running on a Windows 2012 R2 server to ...
1
vote
1answer
853 views

802.1x and windows 10 domain authentication

Our site has had this problem for over a year now...(off and on). After PXE imaging a computer via network MAB authentication, the image finishes fine, but once it gets on the domain via the ...
0
votes
0answers
123 views

OpenVPN plugin/script for RADIUS CHAP/MS-CHAP?

Recently I have configured OpenVPN Community Edition to authenticate using Microsoft Network Policy Server (RADIUS). The problem is somewhat outdated RADIUS plugin downloaded from nongnu.org, which ...
0
votes
0answers
38 views

Building RADIUS for authentication using user name and password

I want to build a RADIUS to be used for authentication using the user name and password. Can anyone share a step by step guide with me regarding how to do so?
0
votes
1answer
46 views

RADIUS Will Not Authenticate For Console & SSH

I am trying to RADIUS authenticate on my HP ProCurve 2910al W14.38 with both console and SSH. My show authentication shows the following: Access Task | Login Primary Login Secondary Enable ...
0
votes
0answers
438 views

EAP-TLS with Microsoft NPS as Radius Server without an account in active directory for devices

I was trying to set up a Radius server for EAP-TLS authentication using Windows Server 2016 with NPS. I'm trying to authenticate non-domain devices i.e. they do not have an account in Active Directory....
1
vote
1answer
1k views

Is it possible to host a RADIUS server on Windows 7 [closed]

Is it possible to host a RADIUS server on Windows 7. I am trying to use this as an authenticating server for my Routers. A third-party application is fine, however maybe if its possible it can use ...
2
votes
0answers
171 views

802.1x WiFi computer (cert) auth against 2008 R2 or 2012 R2 NPS succeeds, fails against 2016 NPS

We have a Meraki wireless infrastructure using 802.1x to authenticate Windows clients against MS Network Policy Server using certificates issued by our internal root CA. The root cert and wireless ...
0
votes
1answer
2k views

Different Windows DHCP scopes on a single network?

Before I joined the company I work at, someone decided to make use of the 10.150.0.0/16 range for the company LAN (despite the company not having nearly that many devices). I think their idea at the ...
0
votes
1answer
1k views

How do I configure NPS to allow connections from domain-joined computers only?

I've created a new NPS network policy with the following settings: Overview - Policy Enabled - Grant access - Type: Remote Access Server (VPN-Dial up) Conditions - Machine Group: Domain ...
3
votes
1answer
4k views

Missing roles in Windows Server 2016

I'm trying to install the NPS role on Windows Server 2016 (Datacenter) but neither Server Manager nor Install-Windows feature seem to be aware of its existence: PS > Install-WindowsFeature NPAS -...
0
votes
1answer
83 views

RADIUS server on VPN set up

Just a quick question, hoping for a quick answer. I'm studying for my MCSA and I'm a little confused about RADIUS. Currently I have a VPN server set up with RRAS and NPS on my home server lab. Does ...
0
votes
3answers
3k views

Windows 10 won't connect to RRAS VPN

Studying MCSA, currently working on a Server 2012 R2 server lab I have set up on a custom built computer. Current configuration, I have a host computer that is just that, a host, with RRAS installed ...
1
vote
1answer
259 views

802.1x Wifi with Disabled AD Account

I have setup an NPS Server (Windows Server 2016) which uses RADIUS to allow my users to authenticate against AD for their Wireless Connections. When I disable an account in AD, NPS will not allow the ...
7
votes
1answer
8k views

My GoDaddy! certificate is not trusted by iOS devices but it is trusted by Android and Windows devices

I’ve deployed some Radius servers (Windows Server 2012 R2 with NPS). They use PEAP-MSCHAP-V2 for authentication with a SAN Go Daddy Certificate. They are deployed in order to handle Wi-Fi connections....
0
votes
1answer
57 views

Can I demand both MAC and credentials to access network using MS RADIUS server?

Is is possible to demand both of these types of authorization? I know Microsoft NPS can use MAC address or credentials to approve access however can I demand both of these simultaneously? Thanks, ...
1
vote
0answers
361 views

802.1x Wifi with NPS Server, using EAP-PEAP and a certificate for Authentication

I don't know if what I am trying to do is possible but here we go. I have a bunch of iPad's that I am going to supervise before they go on to my network. The iPad's will connect to the wifi via 802....
2
votes
1answer
628 views

Control which certificate an NPS network policy selects when the certificate is auto-renewed

I have multiple NPS network policies using Microsoft PEAP with a self-signed certificate. When our internal CA automatically renews the certificate, all of the network policies switch to another (it ...
0
votes
1answer
3k views

2FA with Windows NPS

I would like to set up two-factor authentication for my Wireless users. I have an Windows NPS server that is currently authenticating my wireless users and I want to add certificates or any other ...
1
vote
0answers
375 views

Server 2008 Radius stopped working

i've had a working 2008 Server with NPS as a Radius Server running for authentication of wifi devices, VPN Connections and Logins from Cisco devices. Suddenly the server stopped responding. - No ...
3
votes
1answer
4k views

Providing High Availability for NPS

I need to ensure high availability for RADIUS service in Windows Server environment so it can withstand loss or even temporary downtime of any particular server holding NPS role. Most of technet ...
0
votes
1answer
160 views

Do I need to have NPS configured in my Windows Domain?

NPS is Network Policy and Access Services, and is one of the roles that can be assigned to a Windows Server. I have a Windows domain with two subnets running over an MPLS. Each subnet has a Domain ...
1
vote
1answer
1k views

Microsoft NPS 2012 R2 - Can't perform authentication from Cisco ASA with PAP

I am trying to setup a Cisco ASA (version 9.1(7)6) to authenticate against a Microsoft Network Policy Server 2012 R2. The ASA is able to communicate with the NPS server, however the test aaa-server ...
1
vote
0answers
869 views

NAP clients are evaluated as non NAP-capable

The setup: Active Directory domain, Remote Desktop Gateway server, NPS/NAP server (all Windows Server 2008 R2) and a few Windows 7 clients. The RDG and NPS are set up and running with all Connection ...
1
vote
0answers
1k views

Radius server not responding to EAP requests

We are trying to setup a wifi environment using WPA2 security using Radius server and AD authentication. We've set up the radius server using the following guide: https://networklessons.com/wireless/...
1
vote
0answers
396 views

Use mail attribute for 802.1x RADIUS authenticatioon with Microsoft NPS

We have run a Cisco WiFi network that uses 802.1x to authentication logins against Active Directory. Employees login using their UPN prefix, and all works well. For various reasons we'd like users ...
1
vote
0answers
26 views

Windows RADIUS approval

I'm in the process of rolling out WPA2 Enterprise and am trying to figure out how to allow mobile phones to use the network. Pushing out the config is easy with my MDM, but how do I tell NPS to allow ...
1
vote
1answer
1k views

NPS/RAIDUS Authentication for Wifi and certificates for non trusted server

I'm trying to setup an NPS server as RADIUS server for Wifi network of employers of my company. All mobile devices could connect to this networks using their domain user/pass. My problem is to let ...
1
vote
0answers
4k views

Windows Server 2012R2 RADIUS (wifi) clients won't accept bought wildcard certificate

I've been managing the NPS Server for a while and thought it was time to treat it a valid SSL certificate. The setup I bought a wildcard SSL certificate from comodo, compiled it to an .pfx ...
0
votes
1answer
657 views

Group Policy for restricting OU user to access 1 subnet

I run Windows 2008 R2 with AD, NPS. I have a OU call Wifi Only, I need every user in this OU can not access to any server in a specific VLAN Subnet 192.25.0.0/16 (isolate user) How can I achieve it....
0
votes
1answer
679 views

OATH TOTP with Windows NPS Server?

I'm trying to set up multi-factor authentication for AWS WorkSpaces using AD and OATH TOTP (e.g. Google Authenticator). In the AWS AD Connector config you can set up the RADIUS server's IP, port and ...
1
vote
0answers
539 views

Remote Desktop + Two Factor

My boss has asked me to come up with a way to implement dual factor authentication for RDP access to servers. So, when any of my fellow admins remotely log into a server via RDP they must go through ...
2
votes
2answers
3k views

What are the risks of adding third-party Root CA certificate into NTAuth Store?

What are the risks associated with import of third-party Root CA certificate into the Enterprise NTAuth Store in Windows domain except that the CA is then trusted to issue certificates? This is for ...
1
vote
2answers
143 views

Radius clients with different authentication criteria

I can't seem to find a good tutorial on how to set my network policy for one of my radius clients. I'd like my radclientA with policyA to authenticate and radclientB with policyB to authenticate. ...
1
vote
0answers
733 views

Server 2012 NPS Server not authenticating IKEv2 requests

I am having a weird problem regarding NPS Server when I upgraded my vpn servers from server 2008 R2 to Server 2012 R2. Actually in my infrasturcture I have a Windows 2008 R2 based AD and in its domain ...
1
vote
0answers
36 views

Network Policy not evaluated for forwarded authentications

I'm having a problem with NPS connection policies in combination with forwarded RADIUS requests - the connection policy does not seem to be evaluated? Our domain has several one-way trusts. I have a ...
2
votes
1answer
6k views

NPS/RADIUS authentication across one-way trust

I'm trying to set up Windows Network Policy Server to allow RADIUS authentication in a multiple forest scenario with one-way trusts. We have several domains (each in a single domain-forest) containing ...
0
votes
1answer
230 views

NPS and RHEL ssh configuration [closed]

We have setup windows NPS and RHEL radius client using pam_radius module from freeradius.org for ssh. But on a linux client I see the error pam_radius_auth: Got RADIUS response code 3 in /var/log/...
2
votes
1answer
999 views

EAP-TLS for Wireless with Active Directory

My question is more from a conceptual point of view, rather than implementation (even though I'm asking about proprietary protocols and products). Assuming I have users and credentials set up in my ...
0
votes
0answers
387 views

An error occured during the Network Policy Server use of Extensible Authentication Protocol

It has been almost two weeks to get my radius server up and running. I think i have run in almost to all the issue known to Radius :). Am guessing this to be a Certificate issue, Please go through ...
1
vote
0answers
44 views

Windows Server 2008 NPS Granular time

Like a previous poster I am configuring NPS as a RADIUS authentication source for my wireless clients. I need to impose a Time and Day restriction to the Network Policy that need to be more granular ...
1
vote
1answer
1k views

NPS server Active Directory registration & WIFI RADIUS

Background (I'm new to this, so bear with me): So, I set up an NPS server vm in an AD domain to try out RADIUS client WAPs. The NPS is installed alongside an AD CS server (enterprise, plus one ...
2
votes
1answer
5k views

Cisco Voice VLAN with 802.1X Authentication

I've got a Cisco Catalyst 2960 that I'm trying to configure for a remote office with 802.1X wired authentication. The setup I'm going for is Switch -> VoIP Phone via Internal Switch -> PC/...
0
votes
0answers
1k views

RADIUS w/ NPS, Sonicwall, and Meru Wireless

EDITED 3/23: I've been trying to configure a DS/NPS->Sonicwall->Meru Controller>Client RADIUS Wifi solution and I haven't had much success on the sonicwall side. I've shortened all shared secrets to 8 ...