Part 2: Radius Server for WiFi Authentication with Windows Server 2016 | Computer Based Auth

We will look at Computer Based Wireless Network Settings through GPO and we will push those settings to the end devices. End devices will authenticate with Radius Server and connect to the Wi-Fi.

We continued with our previous video. All devices, names and network settings have been kept as previous video. You can follow along and add additional functionality with the help of this video.

[serch]

I was left with this task but didn't know how to go about it, you're video explanation was a life saver, thumbs up and now I'm a new subscriber, thx.

[androidken]

Great tutorial. You explain it so well and made it easy to follow. My network also thanks you for preventing unauthorized users.

[tariqaligohar]

Thanks for such a beautiful tutorial. Explanations are very clear and easy to understand.

[nawalsingh]

Nice video .. I like it.. Please keep upload and update new videos ...

[istakharahamed]

Please regular update tutorial...I am enthusiastic to learn from you.

[darrenbowring]

Can you configure radius to control the number of devices per user account?

[HamzaRasheed]

Hey, This video helped me a lot and I implemented this and it's working fine. Now I want to make Wired authentication via radius server and my client is going to be a switch ( in my case it's Alcatel 6350). Can you please make a video for LAN Authentication? This could be either computer-based or user-based, does not matter for the time being. I need a solution immediately.

[oc.l]

HI, Great video. I manage to get a user credential login on the first video but I'm not able to get the machine authenticated.
the error I get from the audit log: The certificate chain was issued by an authority that is not trusted. Are you able to advise

[qshaboo]

Hi, Thanks for sharing a very informative video. My question is if a user shares their password with other users then they are able to connect? or it's computer-based policy means the user can login from his/her computer only.Thanks

[shophazahmed]

Grt Video and thank you but like to ask you ....What about the connectivity of mobile devices?

[ateeqsrehman]

thanks for the video. after configuring this if i remove test users groups, will the computer authentication policy still be working??

[TheAmazeer]

Hi, thanks for your videos, very helpful.. In windows 10 you can connect to WiFi before login in.. Is it possible to login in windows session only with WiFi? I mean what is interesting if you need to enter first in windows session and then type again for the WiFi? As you must be on the same network as your domain controller.. The ideal would be that users start their domain computer with automatic connection tout wifi, and then they log in with user and password as a domain user... The same thing as a wired network but with wifi

[raphaelcosta]

Isn't the purpose of the certificate "force" the computers to have the certificate installed in order to test the connection? Otherwise, even if you enter the user and password and if you do not provide the installed certificate, it would not be possible to connect.

I'm homologating an environment and even configuring the certificate, computers that don't have a certificate installed can be connected to Radius, placing only the user and password. Does anyone know what it could be?

I need to force the connection only for computers that have the certificate installed.

[guzzyfs]

This is great, but when you try to connect to the Wi-Fi SSID on Windows 11 the following prompt always appears: "Continue connecting?"

[hnimwzj]

Hi,
Good video, one thing I want to understand, does this approach mean that the PC is managing the WiFi settings?
The computer is authenticating on the SSID and not a user account?

[Nadir]

Hello,

How can we create two SSID? One with username and password and the other with auto-login if the pc is on a domain.

[wawanprasetyo]

If computer not join to domain is still able to connect wifi?

[ovaiskhan]

Hello, i have seen your video because i am having an issue with the devices those are non-domain joined. I dont want my any non-domain joined devices to connect with SSID due to the security reasons. however, no matter whatever settings i choose, if my user is authorised then i can still connect on smartphone or workgroup laptop using my ID and password. Do you have any solution for that ?

[JoshMcCracken]

Thanks for the video. I have a small problem after following this video. It seems that under the group policy object > Wireless Network (IEEE 802...) > PolicyName > Profile > Security > Under the network auth method, we use Microsoft PEAP > Properties > and I have both "Verify server identity" and "Connect to these servers" checked, with the FQDN of the RADIUS/CA server added. The problem is if I check off the Trusted Root CA in the large list, my client is unable to authenticate to the Wireless SSID. So I must keep the trusted CA unchecked. Have you seen this problem before?

[quyleanh]

I received notice: Can't connect because you need a certificate to sign in. Contect your IT support person. Although I installed certificate. I don't know. Anyone help me?