WPA and IAS Policies Help

23 Mar 2005 7:13 PM

Rob taggart

We have successfully setup IAS to authenticate our wireless clients. we auth
the domain computer account first then when a user signs on it switches to
the user credentials. This works great, however we would like to configure a
policy to be able to allow access on our wirless network to users who are in
our domain and on domain computers. We want to prevent a domain user from
using outside equipment to access the network. i have tried setting up a IAS
policy that used a anded stament stating domain computer AND domain users for
access however this broke authentication for all users.

Any advice

24 Mar 2005 12:41 AM

James McIllece [MS]

Show quote Hide quote

"=?Utf-8?B?Um9iIHRhZ2dhcnQ=?=" <Robtagg***@discussions.microsoft.com>
wrote in news:2E0DE215-CD64-4728-AB48-353DF7E6DA43@microsoft.com:

> We have successfully setup IAS to authenticate our wireless clients.
> we auth the domain computer account first then when a user signs on it
> switches to the user credentials. This works great, however we would
> like to configure a policy to be able to allow access on our wirless
> network to users who are in our domain and on domain computers. We
> want to prevent a domain user from using outside equipment to access
> the network. i have tried setting up a IAS policy that used a anded
> stament stating domain computer AND domain users for access however
> this broke authentication for all users.
>
>
> Any advice

Hi there --

As far as I know, PEAP does user or computer authentication, but does not
support both user AND computer authentication for a single connection.

None of the EAP authentication protocols implemented today support multiple
authentications for a single connection.

I believe, though I am not 100% sure, that this will be supported in PEAP
v2.

--
James McIllece, Microsoft

Please do not send email directly to this alias. This is my online account
name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no rights.