Meraki NPS Radius Authentication deny non domain joined devices
We have setup Meraki NPS Radius Authentication and it works like it should the only issue that non domain joined devices are able to connect to the radius SSID as we are giving out certificate automatically. What's the best solution to block non domain joined devices? If you have detailed steps would greatly appreciate that.
Right now we have configured NPS to authenticate with AD Users that are part of a certain Domain Group. And in our case laptops that are not part of the domain are still able to use the same AD credentials and login to the same corporate WiFi and we are trying to stop that and have only domain joined devices able to connect to the corporate WiFi. How can we authenticate only certain users OUs and to only domain joined devices ?