Windows GPO for 802.1x

on

 


Display All Applied GPOs applied to  (User and Computer)

Run the command prompt as administrator or you may run into issues with the command returning computer settings.
gpresult /r

See Applied Group Policies in Windows 10 using RSOP


rsop.msc




=================

It seems that the "Security" option is available in Wifi properties of Windows 10 enterprise only when you setup the wireless network connection manually.

Control Panel -> Network and Internet -> Network and Sharing Center -> Setup a new connection or network -> Manually connect to a wireless network.
Choose the Wifi adapter -> Enter the info of wireless network -> Change connection settings -> Now you will have the security tab available.
Click on the PEAP settings -> Uncheck "Verify the server's identity by validating the certificate"
Click on Advanced Settings -> Specify authentication mode -> Select "user authentication"  -> Click save credentials and enter the details.


For Wired connection, when Wired AutoConfig is running, Authentication tab will show up



It's not very clear in the UI but, in the Client Authentication section of the supplicant the 'Primary EAP method' refers to the User auth state, and the 'Secondary EAP method' refers to the computer auth state



====================






















PEAP Authentication






















Computer Certificate Authentication






















Click Properties button:

The 1st section instructs endpoint how to  select computer certificate. The 2nd section instructs endpoint how to validate Authentication Server certificate.













Comments

Post a Comment