Radius Server Windows 7
IT-Person wrote: Maybe check to make sure the user is in the correct security groups and it is propagating to the computer you are signed in on. Do a GPresult /h to make sure. If they are not showing up correctly, run a GPupdate and restart. Shouldn't be an issue with security groups as the when I attempt to connect to the SSID, the NPS logs from the server show that the user is authenticated. Also, I've tested this on a non-domain Windows 10 box. I installed the CA manually on it and it connects fine. Tomorrow I'm using an identical machine and upgrading it Win 10 to rule out any issues with the wireless drivers.
Free Radius Server For Windows 7
Any other suggestions? Hi all, This is an old thread, but it led me down the path that solved my issue.
I had nearly exactly the same conditions listed by others - Windows 7 had trouble with a PKI-issued NPS cert, while later operating systems did not. What I discovered is that my NPS server certificate DID NOT HAVE A SUBJECT DEFINED in the certificate. This was due to a configuration error on the computer template. When I say NPS server certificate, I'm referring to the computer certificate located in the local machine's Personal cert store. Windows 7 does not tolerate the NPS cert being subject-less; Windows 8 and following handled this condition fine.
The article with instructions that helped is here: If the blog post is not available in the future, let me quote it here for future reference: So, it looked like the Kerberos Authentication certificates we had issued from our internal CA to our NPS server had a blank subject line, and Windows 7 doesn’t like it. Other OSs just ignore this. On our CA, we changed the template properties for Kerberos Authentication (use MMC, add snap in – Certificate Templates). Double click on the template, select the Subject Name tab, and set it to a relevant format (I chose DNS name). I also extended the Validity period as 1 year is irritating.
Radius Server Windows Server 2016
Now, back on my NPS server. Open the Certificates MMC (Computer), go to Personal / Certificates and right click in the details pane – All Tasks / request New Certificate. AD Enrolment Policy should be selected, click Next.
Re: Windows 7 and Radius Auth not working 04:27 pm If NPS doesn't show an attempt, check the 'validate server certificate' settings on the Win7 machine.
Free Radius Server
Select Kerberos Authentication and Enroll. Check this new cert to make sure that the Subject attribute isn’t blank. Now, going back into the NPS interface. Head to Network Policies and double click on your policy. Go to the Constraint tab, Authentication Methods / PEAP and click on Edit. The certificate expiry date now shown should tie in to the one you just created. With this done, our Windows 7 PC would now connect.
I hope this saves someone a few hours!