Discussion Locked

Wireless laptops authentication

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We have a few wireless laptops, is there anyway new users can login wireless to domain without having to login to wired network to create their profile (and cache their credentials) first?

7 replies

by p.j.hutchison

Oh well, thats what I figured.

I have noticed that if I login with a cached credential with one user and then login again with an uncached one it works, but then the GPOs aren't applied unless I logout/login again....

by faradhi

Yes, I think. I wouldn't swear to it. I have never tired but depending on how it is set up, a wireless connection should be the same as a wired connection. So if you put an access point on the domain then when the laptop boots, it should associate and make a connection. Then you could just log in to the laptop as normal.

I would be sure that you follow all the steps to secure the connection as much as possible.

by faradhi

CGIT has a really good Idea.

I would be uncomfortable with wireless on my domain. I usually set the AP in a DMZ with a firewall between it and the domain. Then allow only those resources that are absolutly necessary through the firewall. In the case of CGIT's suggestion allow only RDP through the Firewall.

by cg it

Faradhi is right. Wireless is like wired without the wires. If you have an access point on the domain for wireless, as long as you created the new user account and computer account in AD Users and Comuters, they can enter credentials just as desktop users do. BUT, they get a profile on the laptop [stored there] and also a profile on the desktop [stored there] unless you set a mandatory roaming profile [stored on the server]then they will get the same profile regardless of what computer they use.

Another way without the hassle of different profiles and the performance hit on mandatory roaming profiles is remote desktop. They log in with credentials and work off their desktop just as if they are sitting in front of it.

by hal 9000

While it is right that you should be able to log in wirelessly to create an account a lot depends here on what is acceptable and proper under the wireless rules that have been setup. It is possible that unless the user is already on the domain they are unable to log onto the wireless network that is how I would setup things just for basic security but if the connection is wide open then you should not have any problems creating an account.

Col

by km2

You can do it, i use it daily at school over a 54mb wifi connection connected to a dell laptop
and yes, you can logon to it via the login screen

This discussion is closed to new replies.