Restrict domain computer to connect to WiFi by NPS

Question

Hello team!
I would like to know if it is possible to restrict domain computers (contoso.local) to connect to wireless SSID using Network Policy Server (NPS).

Environment:

SSID: Sales-5G
This SSID is set to allow connections using Active Directory credenctials

Computers in domain contoso.local: pc1.contoso.local and pc2.contoso.local
Windows Server 2019 with NPS: server1.contoso.local
Computers in workgroup home: pc3 and pc4

Only pc3 and pc4 can connect to Sales-5G using Active Directory credenciatials.

Answer 1

Hello @Ricardo Ito ,

It is not easy to formulate a "probably no practical solution" type of answer; it is much easier to respond if one knows a positive answer and possibly foolish to state categorically that something is not possible.

The NPS, which is making the accept/reject decision, only has the information in the RADIUS messages upon which to base its decisions; in the case of authentication with user credentials, there won't be much machine related information in the messages beyond the MAC address of the connecting device and the MAC address is not a good discriminator of whether the device is a joined to a domain or not.

Gary

Answer 2

Hello guys!
Anyone?