Certificate Based Wi-Fi Authentication

Question

Certificate Based Wi-Fi Authentication

create share 676

Hi,

I have implemented Certificate Base Authentication for my Domain Computers WiFi Network. I want to enable user-based authentication as well but need to allow only a single user to connect to this network. Is it possible?

Thanks.

Vadims Podāns 9,266 Reputation points MVP

2022-02-26T11:25:53.827+00:00

but need to allow only a single user to connect to this network.

you want enable Wi-Fi only for particular user account, or single instance of the user account? If it is former, then you can configure user account as condition in RADIUS policy and move the policy to the top of the policy list (they are processed in sequential order until first match). If later, then you cannot do this. If user has proper certificate on multiple devices, any of these devices can connect simultaneously.
create share 676 Reputation points

2022-03-14T12:08:18.263+00:00

Hi,

Sorry for the late reply. Yes, I need to allow only a specific user to be able to connect to the wifi. I added that user in a group and then added this group in the same policy. Then I change the group policy settings to allow "user or computer" authentication. What else I should change here to be able to connect using that user as well?

1 answer

Your answer

Vadims Podāns 9,266 Reputation points MVP

2022-02-26T11:25:53.827+00:00

but need to allow only a single user to connect to this network.

you want enable Wi-Fi only for particular user account, or single instance of the user account? If it is former, then you can configure user account as condition in RADIUS policy and move the policy to the top of the policy list (they are processed in sequential order until first match). If later, then you cannot do this. If user has proper certificate on multiple devices, any of these devices can connect simultaneously.
create share 676 Reputation points

2022-03-14T12:08:18.263+00:00

Hi,

Sorry for the late reply. Yes, I need to allow only a specific user to be able to connect to the wifi. I added that user in a group and then added this group in the same policy. Then I change the group policy settings to allow "user or computer" authentication. What else I should change here to be able to connect using that user as well?

Answer 1

Vadims Podāns 9,266 MVP

When you configure wi-fi policy in RADIUS server (NPS), you configure the authenticated groups scope in Condition tab:

Create a custom group, say, "Wireless Users" and add allowed users to that group. Set this group in NPS policy as shown above.

Share via

Certificate Based Wi-Fi Authentication

1 answer

Your answer