why are clients showing up in IAS as "Guest"



I'm setting up a wireless network and have certs in place and am ready to
go, but when I connect with a laptop I get an IAS log that says:

Event Type: Warning
Event Source: IAS
Event Category: None
Event ID: 2
Date: 1/20/2006
Time: 12:53:12 AM
User: N/A
Computer: IAS
Description:
User was denied access.
Fully-Qualified-User-Name = DOMAN\Guest
NAS-IP-Address = 192.168.1.15
NAS-Identifier = <not present>
Called-Station-Identifier = <not present>
Calling-Station-Identifier = <not present>
Client-Friendly-Name = wireless
Client-IP-Address = 192.168.1.15
NAS-Port-Type = Wireless - IEEE 802.11
NAS-Port = <not present>
Proxy-Policy-Name = Use Windows authentication for all users
Authentication-Provider = Windows
Authentication-Server = <undetermined>
Policy-Name = <undetermined>
Authentication-Type = EAP
EAP-Type = <undetermined>
Reason-Code = 34
Reason = Authentication failed because the user account is not enabled.
Before the account can be authenticated, a person with administrative rights
for either the computer or the domain must enable the user account.

My IAS policy for now is set to "Any time of Day" useing PEAP, that's it.
Now this client is joined to the domain and is loged on as a user, why would
the IAS server think the Guest account was trying to access? Thanks



.



Relevant Pages

  • XPSP2 Wireless Network Startup with IAS and PEAP Auth.
    ... We have now successfully configured wireless network access over WPA, IAS ... The problem we have now is that despite we have a successfull computer ... authentication on IAS, ...
    (microsoft.public.internet.radius)
  • Re: RADIUS (IAS) and Cisco Concentrator? (PDF Attachment)
    ... The order the radius statements in IOS will determine the order the ... IAS servers are checked. ... RADIUS client what policy to use? ... I'm not sure what this is, but if it refers to a secure authentication ...
    (microsoft.public.windows.server.active_directory)
  • RE: check group membership in Connection Request Policy
    ... The access request does not contain a valid user password, ... Authentication is done at the VPN3000, ... So what data does the VPN3000 send to the IAS? ... a custom IAS extension would be really a solution. ...
    (microsoft.public.internet.radius)
  • Re: 802.1X/EAP authentication issue with XP client
    ... I also tried adjusting the IAS remote access policy framed MTU param ... client, same scenario, is not getting a successful authentication. ... or system event logs. ...
    (microsoft.public.internet.radius)
  • Re: RADIUS (IAS) and Cisco Concentrator? (PDF Attachment)
    ... so I simple copy the settings to another IAS server and register in AD then the new one will be a failover? ... Registering IAS with AD effectively tells AD not to accept External Authentication requests from other sources. ... You can have multiple IAS servers registered at the same time, so you can tell your Concentrator to follow a chain of servers if the first one doesn't respond. ... At the bottom of the properties window, select "Grant remote access permission" and then click OK. ...
    (microsoft.public.windows.server.active_directory)

Loading