IAS for Wireless Authehtication

Hi.
I have setup an IAS server for wireless authentication with these policies:

1) NAS-Port-Type matches "Wireless - Other OR Wireless - IEEE 802.11"
2) Windows-Group matches "domain\Domain Users;domain\Domain Computers"

using PEAP-MS-CHAP-V2

but i have 2 problems:

1 - a computer who is part of the domain but logged on with a local computer
account can still connect to the wireless network.
2 - a computer who is not on the domain can't connect even when providing
the right domain credentials (which also gives me the problem of trying to
connect a windows mobile device since it's not part of the domain)

can someone please tell me what am i doing wrong?

thank you

 

Please repost it to the below newsgroup

On the web:



--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"SynEngium" <SynEngium@discussions.microsoft.com> wrote in message
news:30C52746-4AD4-4B25-A333-430EB93CA6AD@microsoft.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Hi.
> I have setup an IAS server for wireless authentication with these policies:
>
> 1) NAS-Port-Type matches "Wireless - Other OR Wireless - IEEE 802.11"
> 2) Windows-Group matches "domainDomain Users;domainDomain Computers"
>
> using PEAP-MS-CHAP-V2
>
> but i have 2 problems:
>
> 1 - a computer who is part of the domain but logged on with a local computer
> account can still connect to the wireless network.
> 2 - a computer who is not on the domain can't connect even when providing
> the right domain credentials (which also gives me the problem of trying to
> connect a windows mobile device since it's not part of the domain)
>
> can someone please tell me what am i doing wrong?
>
> thank you
> <!--colorc--><!--/colorc-->