Re: Wireless Radius Clients

Ignore this. This issues with computer cert $ resolved.

Just need to autoenroll user accounts and I'm finished. As I said earlier, I
can duplicate the template but when I go to add it, it does not appear in the
window. Note the there is already a "user" there. Maybe there can only be one
of each type?? And if so wouldn't that type just auto enroll if GPO user
setting is set to auto enroll???
--
Steve
MCSA, MCSE


"Steven" wrote:

Ok I lied, I have 2 questions... :-)

On reboot of wireless clients I get the following error:

Event Type: Warning
Event Source: Microsoft Firewall
Event Category: None
Event ID: 21171
Date: 3/9/2006
Time: 12:13:53 PM
User: N/A
Computer: JAMINT
Description:
The VPN connection attempt by user JAMICONS\STEVEF-NB$ from VPN client IP
address 000e357b2d8e could not be established.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 21 00 04 c0 !..À

Appears to be policy issue. I have RRAS and IAS on same server (SBS)
Wireless policy created by IAS wizard as first in line. Computer cert may not
be applying??? Can not connect via hood untill user logs on. Could be ISA
2004 issue???

But once I log in everything is fine.

Any ideas.
--
Steve
MCSA, MCSE


"Ace Fekay [MVP]" wrote:

In news:05EE5257-C768-43B6-A5AC-60C5261780F1@xxxxxxxxxxxxx,
Steven <Steven@xxxxxxxxxxxxxxxxxxxxxxxxx> stated, which I commented on
below:
I got a Linksys AP for 79.

Can I ask ya one more question??? Is there a way to auto enroll user
certs the same way ya do computer certs or do they have to pull down
from webpage?

Steve
MCSA, MCSE

Yes, you can. Just duplicate the User certificate and call it "Autoenroll
User", and set it up permissions to allow authenticated users to autoenroll.
Of course the issuing CA needs to be 2003 Enterprise Edition to be able to
duplicate that sort of cert. Once done, you can setup autoenrollment in a
GPO in AD.

If you need links, I'll have to dig them up for you. Let me know...

Ace



.

Loading