Is it possible to select which AD server NPS uses when configured to act as Radius for auth?

Question

I'm looking to do some testing and wanted to see if there was a way I can point a NPS server which is carrying out Radius auth for WiFi at a specific AD server of my choosing within the domain. I have 4 DC's but to allow for some testing, I'd like to be able to make a specific NPS server talk to only a single DC which I specify.

Does anyone know if this is possible and if so, how I would go about it?

Answer 1

Hello @DaveK

Thank you for your post.

I believe that this document below might be useful for your case scenario.

https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-plan-server

Looking forward to your feedback,

Cheers,

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Hi there,

Yes it is possible to configure NPS server to specific Active Directory Domain. You can use this topic to register a server running Network Policy Server in Windows Server 2016 in the NPS default domain or in another domain.

NPSs must be registered in Active Directory so that they have permission to read the dial-in properties of user accounts during the authorization process. Registering an NPS adds the server to the RAS and IAS Servers group in Active Directory.

Register an NPS in an Active Directory Domain https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-manage-register

Network Policy Server Best Practices https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-best-practices

----------------------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer--