Re: SBS / Vista / Wireless



Thanks, instead I just disabled the IAS / certs and made the wireless access
point use WPA-PSK with TKIP using a manually set key.
"Robert Li [MSFT]" <v-robeli@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:9F36POB1HHA.5836@xxxxxxxxxxxxxxxxxxxxxxxxx
Hi Aart,

Thanks for posting in our newsgroup.

From your replication, I know that your first Vista workstation fails to
authentication with IAS. If that's not right, please don't hesitate to let
me know.

Please let me know the following to make the situation more clearly:

1. Do you have ISA 2004 installed?
2. What is the vendor and model of the wireless access point in use?
3. What specific EAP/PEAP authentication method(s) are in use?
4. Do the Windows XP clients have the same issue?

Please first check the steps in the following articles:

Wireless Group Policy Settings for Windows Vista -
http://www.microsoft.com/technet/technetmag/issues/2007/04/CableGuy/default.
aspx

Configure Wireless Networking on Windows Small Business Server 2003
http://technet2.microsoft.com/WindowsServerSolutions/SBS/en/library/6202a4df
-3daf-4fa5-9f4d-a409dfddfc171033.mspx?mfr=true

Configuring Wireless Settings Using Windows Server 2003 Group Policy -
http://www.microsoft.com/technet/community/columns/cableguy/cg0703.mspx

Note: If you look at the Group Policy settings in the Server Management
Console, the policy settings for the Small Business Server - Windows Vista
policy GPO appear as registry keys. You can view these policy settings
from
a client computer that is running Windows Vista.

To edit the "Small Business Server - Windows Vista policy" GPO

1. From a client computer that is running Windows Vista, log on as a
domain
administrator, click Start, and then type gpmc.msc in the search box.
2. In Group Policy Management Console, click Forest:DomainName, click
Domains, click DomainName, and then click Group Policy Objects.
3. Right-click Small Business Server - Windows Vista policy, and then
click
Edit.
4. In Group Policy Object Editor, browse to the appropriate GPO, and then
modify the settings as needed.
5. Click Apply, and then click OK
6. Close Group Policy Object Editor, and then close Group Policy
Management
Console.
7. To force the Group Policy settings to be applied, either run gpupdate
/force from a command prompt with elevated privileges or restart the
client
computer.

Please help me collect the following logs for further research:

For SBS 2003/ IAS Server

1) From a command prompt, type 'netsh ras set tracing * enable'
2) Reproduce the problem
3) Turn off tracing from a command prompt with 'netsh ras set tracing *
disable'
4) The logs are contained in the %SystemRoot%\Tracing folder.

For Windows Vista client:

Run the following commands from an elevated CMD prompt
1) netsh ras set tracing * enable
2) netsh wlan set tracing mode=yes
3) Run the connection attempt and wait for it to fail -
4) netsh wlan set tracing mode=no (IMPORTANT: Wait for the command to
return back to the command line)
5) netsh ras set tracing * disable

Please zip up the contents of the %SystemRoot%\tracing directory and send
to v-robeli@xxxxxxxxxxxxx with subject: 40042025-SBS / Vista / Wireless.

I am looking forward to hear from you.

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no
rights.

--------------------
<From: "Aart Jansen" <aart@*remove*hayes.co.nz>
<Subject: SBS / Vista / Wireless
<Date: Tue, 31 Jul 2007 15:04:12 +1200
<Lines: 17
<X-Priority: 3
<X-MSMail-Priority: Normal
<X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
<X-RFC2646: Format=Flowed; Original
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
<Message-ID: <eMrxz9x0HHA.4816@xxxxxxxxxxxxxxxxxxxx>
<Newsgroups: microsoft.public.windows.server.sbs
<NNTP-Posting-Host: smtp.hayes.co.nz 210.54.213.234
<Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:53440
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<Hi,
< I setup the SBS with IAS & group policy to authenticate and define
wireless
<access. (without certs because it got too hard) so basically anybody in a
<group called wireless users (both PC & user objects) gets to use the
<wireless.
<
<anyway the first vista workstation that has come to the site refuses to
<authenticate.
<
<any ideas ? I am guessing the group policy isn't applying the wireless
<config correctly however manually setting the same settings also fails.
<
<There was a huge secure wireless on SBS document that i followed when i
<first set it up but the certs expired and the new one wouldn't
authenticate
<so i worked around certs.
<
<
<



.



Relevant Pages

  • RE: SBS / Vista / Wireless
    ... Configuring Wireless Settings Using Windows Server 2003 Group Policy - ... If you look at the Group Policy settings in the Server Management ... the policy settings for the Small Business Server - Windows Vista ... < I setup the SBS with IAS & group policy to authenticate and define ...
    (microsoft.public.windows.server.sbs)
  • Re: Group Policy loading
    ... It should state the group policy was ... >> workstations can ping the DCs when they connect using the Wireless ... >> connections. ... >>> USB. ...
    (microsoft.public.win2000.group_policy)
  • Re: Group Policy Management Console, GPMC for Vista with SP1
    ... Huelsenberg Holding GmbH & Co. KG ... 32 bit for windows vista (SP1) ... Windows Vista SP1 changes the tools that administrators use to manage ... Administrators requested features in Group Policy that simplify ...
    (microsoft.public.security)
  • Re: Wireless Group Policy Option Missing
    ... Just copy that file and you should get the properties for Wireless ... The new Windows Group Policy Guide from Microsoft Press!!! ... > seem to edit the properties of individual wireless network settings. ... >> Darren Mar-Elia ...
    (microsoft.public.windows.group_policy)
  • Re: Service Startup reverting to default settings
    ... Some manufactures like their own tools to admin the wireless in the computer which turns of WZC and maybe even puts it to disabled. ... English blog: http://lordoftheping.blogspot.com ... If workstation can't reach the DC, it can't get this gpo and so apply it. ... > We have a group policy in place that specifically enables the Wireless ...
    (microsoft.public.windows.group_policy)