Re: did i misunderstand?
- From: "Dave Nickason [SBS MVP]" <gwdibble@xxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 24 May 2005 18:20:59 -0400
Here's a bad answer for you - I have the settings you're looking for, but I
don't know why I have them and you don't. When I go to the GPO you refer to
and add a new policy, then go to add a preferred network, under network
authentication, I have Open, Shared, WPA, and WPA-PSK. If I select WPA, the
encryption options are WEP, TKIP, and AES.
Here's a clue - I'm running SBS SP1, and I'd bet the upgrade is included in
WS03 SP1.
"John Sockwell" <spam001@xxxxxxxxxxxxxxxxx> wrote in message
news:OfMyJdKYFHA.2888@xxxxxxxxxxxxxxxxxxxxxxx
>I understand.
> I currently have IAS running and have installed certificate server
> everything works fine. my clients connect obtain a certificate if they
> are in my AD and then connect using WEP encryption as specified through my
> wireless GP.
>
> what i'm having trouble with is finding where i can change my GP to use
> AES encryption instead of WEP. all of my hard ware supports this (my wap
> and 3 laptops) but when i open my GPO -> Computer configuration -> windows
> settings -> Security settings -> wireless network policies -> my policy ->
> preferred network -> my wlan (sorry didn't know how to better describe it)
> i only have options for Data Encryption: "WEP" & "Disabled".
>
>
> "Dave Nickason [SBS MVP]" <gwdibble@xxxxxxxxxxxxxxxxxxxxxx> wrote in
> message news:uwLrJ7JYFHA.2996@xxxxxxxxxxxxxxxxxxxxxxx
>> You can definitely do all of this. What exactly are you running into?
>>
>> Don't forget that you need all of your hardware and drivers to be
>> compliant with whatever security you're trying to configure. Check that
>> here http://www.weca.net/OpenSection/certified_products.asp?TID=2
>>
>> Also, to use AES on XP, you need an update from
>> http://www.microsoft.com/downloads/details.aspx?amp;amp;amp;amp;amp;amp;amp;displaylang=en&familyid=662BB74D-E7C1-48D6-95EE-1459234F4483&displaylang=en.
>> If you run into a problem with that link, it's KB article 893357.
>>
>> There's WPA and WPA2 info all over www.microsoft.com. Here's an
>> interesting one about WPA2/AES
>> http://www.microsoft.com/technet/community/columns/cableguy/default.mspx.
>> If you're trying to do WPA enterprise (certificates instead of shared
>> keys), you need IAS for the back end auth - it's part of WS03, so you
>> already have it. See
>> http://www.microsoft.com/windowsserver2003/technologies/ias/default.mspx.
>>
>>
>>
>> "John Sockwell" <spam001@xxxxxxxxxxxxxxxxx> wrote in message
>> news:%23XSZJFJYFHA.4000@xxxxxxxxxxxxxxxxxxxxxxx
>>>i was expecting to be able to deploy wireless configurations using 802.1x
>>>and configure tkip and aes encryption instead of the easily broken wep?
>>>
>>> -john
>>>
>>
>>
>
>
.
- References:
- did i misunderstand?
- From: John Sockwell
- Re: did i misunderstand?
- From: Dave Nickason [SBS MVP]
- Re: did i misunderstand?
- From: John Sockwell
- did i misunderstand?
- Prev by Date: Adding User Problem
- Next by Date: Re: SBS SP1 Media
- Previous by thread: Re: did i misunderstand?
- Next by thread: Internet Use Policy
- Index(es):
Relevant Pages
|