Re: 802.1x Authentication

From: Cormier, Alexandre (acormier_at_eonmediainc.com)
Date: 10/27/04

  • Next message: Laura Robinson: "Re: RE: Can we really block users from installing applications through Group policy?" 
    Date: Wed, 27 Oct 2004 15:11:15 -0400
To: <focus-ms@securityfocus.com>

    Hi Billy,

    There is a lot of confusion about 802.1x when we look at the microsoft documentation or when speaking with their customer support. 802.1x is bound to "wireless configuration" or "wireless zero-configuration" service whether you are on 2000 or XP. This actually does not make much sense. According to the RFC, 802.1x is used to control the access to IEEE 802 media. In other words, it does not have to be bound to wireless. It is my understanding that all the security policies relating to wireless can be applied to wired access as well.

    hope this helps,

    Alexandre Cormier
    Software Engineer
    R&D, Network Security
    Cardinal Health
    PH: 418.872.0172 x8923
    F: 418.872.0038
    alexandre.cormier@cardinal.com

    Selon Billy Dodson <billy@pmm-i.com>, 27.10.2004:

    > Is is possible through active directory group policy, or any other means, to
    > change the configuration of the ethernet authentication tab? I am trying to
    > enable PEAP authentication and validate certificates. PEAP is not the
    > default setting.
    >
    > I found in group policy where this can be changed for wireless clients, but I
    > need to make this changes for a wired connection. Any ideas?
    >
    > Thanks,
    >
    > Billy
    >

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Laura Robinson: "Re: RE: Can we really block users from installing applications through Group policy?"