802.1X - WPA2-Enterprise Google Authentication and Windows

[Selarton]

Hello,

I'm currently looking for a way to essentially do the following within a GPO

https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_EAP-TTLS___PAP_Authent...

I currently have Google Authentication working via Chromebooks in my current fleet.

The issue I'm having is finding the correct option within Group Policy to use EAP-TTLS and PAP.

I'm currently only seeing EAP-MSCHAP V2 and PEAP. Any input is greatly appreciated.

Thanks!

[PhilipDAth]

EAP-TTLS itself is only supported in Windows 10 and above.  I have never tried to configure this in group policy myself.

It looks like you need a Server 2012 or newer AD controller to be able to have this functionality.  You will of course need your domain running at 2012 level or better, and I'd suggest the forrest should be the same as well.

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh...