Selecting PEAP-TLS and other PEAP methods in Windows Vista and Windows Server 2008

Windows Vista and Windows Server 2008 support the Protected Extensible Authentication Protocol (PEAP) and the Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAP v2) and Transport Layer Security (TLS) authentication methods for PEAP. PEAP can be used in Windows Vista and Windows Server 2008 for remote access VPN connections, 802.1X-authenticated wired connections, and for wireless…

2

My review of Information Week’s “Rolling Review: Microsoft NAP”

Greetings, keepers of the NAP flame! On August 2, Information Week published an article titled “Rolling Review: Microsoft NAP.” I would like to comment on it on behalf of the NAP product team and add technical clarity where I can. 1. Opening paragraph: “it’s to Microsoft (NSDQ: MSFT)’s credit that early on the company moved…

2

What is the NAP client doing?

Greetings, Guardians of NAPness! Here is an interesting question about NAP client behavior that was posed by a fellow NAP fan: How does a NAP client communicate a change in health state and get reevaluated and what sort of ongoing traffic is there between the NAP client and the NAP health policy server? If you have…

1

NPS/NAP Logging – BSU.EDU style!

Hey NAP fans, I’m Alex Chalmers from Ball State University with a guest post about NPS logging. If you made it to one of Jeff’s TechEd IT Pro presentations, you’ll remember me discussing our NAP implementation and some of the challenges that we’ve faced along the way.  Gathering accounting data across the NPS implementation for…

3

NAP Infrastructure Planning and Design (IPD) Guide Now Available!

Would you like help selecting the best NAP enforcement method to accomplish your goals? Well, you’re in luck. The fine folks on the Solution Accelerators team have created guidance on just that topic! The document is entitled “Selecting the Right NAP Architecture”. Here is the main page which lists the available Infrastructure Planning and Design…

1

NAP 802.1X Configuration Walkthrough – Part 3

This is a continuation from Part 1 and Part 2. Step 3 – NAP Clients, it’s just too easy NAP can be configured from the command-line, the MMC (except on XP SP3) and of course Group Policy (GP). Since this is a workgroup scenario, I am going to skip GP – but the principles below…

5

NAP 802.1X Configuration Walkthrough – Part 2

NAP 802.1X Configuration Walkthrough – Part 2 This is a continuation from Part 1. Step 2 – Windows Server 2008 NPS, the heart of NAP I am going to take a slightly different approach than the 802.1X step-by-step guide. Feel free to follow either method, whatever gets it done for you! My configuration assumes a…

5

NAP 802.1X Configuration Walkthrough – Part 1

I just got back from TechEd 2008 North America (Orlando) where I presented two “breakout” sessions on NAP. It went off with a bang and most people really loved the sessions / demos. I have blogged a couple times in the past that I would document exactly how I made it all work and now…

7

How ‘bout some NAP perspective from the field

Hello NAP Bloggers! My name is Mark Foust, a Windows Server Networking Technical Specialist working down in Tampa Florida (USA). I wanted to share a bit of my perspective on the world of {NAP}.   7 things you may not have considered about NAP:   1.   NAP enforces minimum consistency levels, not maximum security NAP…

0

NAP FAQ: Logging baby, logging

A colleague of mine pointed out an AMAZING blog post on the Windows Server Customer Advisory Team (WinCAT) team blog – The Definitive Guide to NAP Logging. This is a kick butt troubleshooting post! Very useful when trying to track down what is wrong between NAP Client and Server. Much thanks Pete Rivera (the author),…

0