Windows Forum

Ask something
Discussion Locked

IAS on 2000 server

0 helpful
7 replies

by nagy

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I am trying to configure a win 2000 server as a radius server. I have configured ias to support this and it works using PAP. The 2000 server is a file server / member of an NT 4 Domain. I would prefer to use CHAP for encrypted authentication. I noticed that this is not supported with IAS on nt 4 but it is with WIN 2000 IAS. Is the fact that the 2k server is a member of the nt4 domain the reason for this not working or could it be something else?? I have re-entered secrets and checked confirmed type case.

7 replies

by rvkempen

If the RRAS server is a member server in mixed or native Windows 2000 domains, the computer account of the RRAS server when using Windows Authentication must be a member of the RAS and IAS Servers security group.
If a domain administrator installedRRAS, the computer account would have automatically been added to this security group. However, if a nondomain administrator were to install RRAS, a domain administrator should add the computer account to the group with the Active Directory user andGroups MMC snap-in, or use the following Netsh command: ras add

Taken from the Shinders book w2000 network administration, lets give them the credit.

by rvkempen

Note that NT$ does not have these groups, nor an AD, so you must have a 2000 dc online.

by nagy

The NT domain is 4.0. It looks like I will have to use PAP authentication until the site migrates to win2k/Active Directory Domain Controllers.

This discussion is closed to new replies.