#Lightwrite 5 windows 10 windows 10
I have the same issue that windows 10 unable to do machine authenticationĬisco ACS performs this duty by checking that the user authentication is precluded by a computer authentication, and if there is no computer authentication the user auth is rejected.
Still stuck in the machine authentication problem and maybe these posts confirm that we need a 3rd Party agent on windows 10 because of lacking NAP.Įnabling NAP will give you the option to combine user and machine groups in the same policy with an AND statement. That is what I was trying to explain to you from the beginning. anti-virus installed and up-to-date), then that is where you need an agent such as Anyconnect Posture Agent if using ISE. If you want to check health status or posture (i.e. So if you are just looking for authentication, then you do not need any third-party agent. Assuming your Radius server is configured properly. So as long as the computer is joined to the domain, it will authenticate successfully. Once you do that, then you will see another tab show up on your network adapter properties where you can configure "Authentication." If you choose PEAP MS-CHAPv2 as your EAP protocol, then the computer will send its AD computer credentials to authenticate. For the Wired side, you need to configure "Wired AutoConfig" to start automatically. The wireless supplicant is always enabled by default. In Windows, the native supplicant (Wired AutoConfig or Wireless AutoConfig) can do machine authentication with 802.1x.
As I said before, 802.1x authentication is separate from any posture/health checking.
0 kommentar(er)
