Re: 802.1x Authentication for non-domain machines

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 04/13/05 

Date: Tue, 12 Apr 2005 21:25:12 -0500

The computer itself can not authenticate to the domain if it does not have a
computer account in Active Directory via EAP-TLS. If you use PEAP there is
no computer authentication - only user configuration at the client end but
all computers would need to trust the certificate on the IAS server. A non
domain computer can request a certificate from a domain CA via Web
Enrollment and is often done for ipsec offline certificate requests. There
is also a Microsoft wireless newsgroup where you may want to post. ---
Steve

"Carlos A. Morillo" <carlos.morillo@myrealbox.com> wrote in message
news:O69TDnsPFHA.248@TK2MSFTNGP15.phx.gbl...
> Is it possible to assign non-domain machines a certificate to authenticate
> to a wireless network?
>

Relevant Pages

  • Re: Flaws IIS6 with AD (2003) Cert Mapping
    ... authentication over https, then when they request a user cert, the CA fills ... the certificate in place of the username/password authentication. ... authenticate users, it's the Subject Alternative information with the UPN ...
    (microsoft.public.inetserver.iis.security)
  • Re: WLAN with WPA/Radius/Certificate on SBS2003
    ... One of the laptop you recently re-setup cannot authenticate to the WLAN. ... As you can indentify that on the CA the client computer has requested the certificate. ... I'd like know whether you can see the certificate on the problematic laptop the Certificate MMC. ...
    (microsoft.public.windows.server.sbs)
  • Re: Possible Security Flaw in Windows 2000
    ... IIS certificate mapping uses explicit name mapping to authenticate users. ... The certificate is issued to johndoe2. ...
    (microsoft.public.win2000.security)
  • Re: VPN Access
    ... Make sure that you are logging onto your computer with credentials that will ... authenticate you to your domain resources. ... User Certificate is Valid ... successfully and I can access share drive on one server. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Secure web site access and PKI Certs
    ... But I should have thought that if the PKCS12 certificate is password ... It sounds like a poor way to authenticate. ... Secure web site access and PKI Certs ...
    (Security-Basics)
Loading