Discussion on:

Ultimate wireless security guide: Automatic PEAP deployment with Microsoft Active Directory GPO

Does the certificate need to be installed on the client computer?

I tried this as outlined here and it doesn't appear to have completely worked.

The GPO pushed to my test client and the settings showed up for the WLAN adapter, but no client side certificate (for my server/domain) was available for selection... so I get an exclamation point (!) on the test client's WLAN adapter and a big red ? on the network connection 'Authentication Failed' ...

Do I have to set up a CA server to direct users to install the cert?

This is all new to me, sorry if I am missing something obvious.

The clients do need to be aware of the servers public key. You can push the public key of the CA cert out to all of the clients by including it in the Domain Security Settings mmc:

* Public Key Policies
-* Trusted Root Certification Authorities

Does this only apply to Windows Server? What if you only have a wireless router?

Is there a patch to upgrade the domain controller GPO to WPA2? The wireless settings GPO supports WPA but not WPA2.

Thanks. This was great.
Is there a way to lock this policy so the clients can't change this and be at the top of the profile every time in XP SP2.
Thanks
Malik

is this function also possible for wired connections?
imagine that the wireless accespoint is a layer 2/3 switch configured to use RADIUS and all ports are 802.1x enabled.

because i would like to authenticate computers to my network. the only thing i got working is by user credentials and user certificates.
with this HOWTO it works just like i want it to work... only using wired network authentication instead of wireless.

Thanks in advance,
Thierry Penning

I'm not seeing the option for 'wireless networking' anything when I edit the new GPO i've created as shown in the example. I even tried running the gpo editor from a wireless laptop in case it was because the workstation didn't have wireless hardware... running w2k3 DCs.