802.1x Wired connection with EAP-TLS authentication

[Dror]

Hi all,

so after a long time I was finally able to authenticate devices via Access policy in Meraki MS225 +NPS server in order to authenticate computers with Domain Computers group and certificate. But the thing is,its working only with 'Smart Card or other certificate (EAP-TLS)' authentication method, and I also had to change some more inner additional settings.

The default NIC configuration is EAP(PEAP), and it's not working with this method.

Now, if I want to apply the policy for all computers, it doesn't make sense that I need to go each computer and set it manually..

How can I change the NIC configurations for all computer organizations? Couldnt see something like this in GPO.

Thanks in advance,

Dror

[KH]

This question is likely better suited for the vendor of your client machines, Typically would be pushed via GPO however if you don't see one you might have to implement a PowerShell script or similar and push it to all the devices that way.

[alemabrahao]

Maybe it will help you: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/...

[Dror]

thanks but the link seems to be broken

[alemabrahao]

Try it again please.

[Dror]

Man, you made my day! thats exactly what ive needed. 

I could edit and deploy the Wired network policies from GPO for all computers. works after reboot,

Thanks!!

[PhilipDAth]

A couple of tips.

You need a group policy for workstations to do two things:
* Enabled the Wired AutoConfig service
* Configure the authentication to match what you are using in NPS.

You wont be able to get it to work without setting the above two.