WinPE2 and NAP / imaging and NAP

-

hello,

about move network nap/802.1x before want come way image.  using dos network boot system can connect our network , using ghost image our workstations.  moving 802.1x/nap, setup not work since not on correct network our server, since sent our guest vlan failed authentication.

i hoping new windows pe 2.0 had kind of supplicant nap, see on various forums doesn't support it.  

what are people using network boot imaging which has a nap supplicant?  don't want setup a switch with static vlan assignments.  

faced same dilemma. , basicly came down choices;
* find way install using pxe , boot image methods supports certificates, eap , whole "chebang" ...
* choose design "guestzone" no access inet access , f12 pxe boot.
* lock away install-network in secure location, office / part of building.

we chose middleground - can support pxe throughout building - computers without cert/8021x/nap capability connecting network find network 2 things work;
* internet
* pxe

if thats big "nono" im afraid have no more assistance offer. :-)
but if choose middleground able provide instalaltion services, need know who's walking floor of buildings - because in technical terms may end computer part of domain - still, require user domain log in.

the solution use automated vpn tunnelleling (after windows runnign first time) requiring 2 factor authentication join domain , certs + gpo's etc - , after rest automated.

if thats vistor, ruining own computer - bad, there plenty of warnings computer formatted.
if it's malicious user, might have other issues want focus on - or not choose route @ all. :-)

sincerly
- jon
sincerly, jon e. carlsen


Windows Server  >  Network Access Protection



Comments

Post a Comment

Popular posts from this blog

Indexing Server

-
just quick question - 2008 have indexing server? can't see option - , want setup web based search engine using indexing server catalogs , asp.net....   it availble? does not based on - http://technet2.microsoft.com/windowsserver2008/en/library/82bac070-bee4-452e-a783-3ce31b5e1d0f1033.mspx?mfr=true Windows Server  >  Management
Read more

Schannel Issue

-
hello there, i have windows 2008 r2 machine. , have hosted sharepoint 2010 on it. i have site have published on internet. i don't know whether it's related , getting error unable resolve or come conclusion. it's pretty frequent. my server patched latest updates. log name:      system source:        schannel date:          8/12/2011 3:49:43 pm event id:      36887 task category: none level:         error keywords:      user:          system computer:      mycomp.domain.com description: following fatal alert received: 42.   the above error doesn't provide info . could please me identify issue , possible solution ? there have been lot of posts one. i believe can safely ignored...
Read more

oclist /xml or /?

-
oclist have qualifiers? can behaviour changed, example output xml?   given previous comments andrew m , comments in forums , blogs think answer no, it’s simple app calling underlying api, thought i'd ask can't seem find anything.   why asking question? i'd @ least 2 things oclist (apart nicer looking output [which i'm not going get], dependances listed [dicussed in forum , ruled out], , refrushing add ad componets , telling use dcpromo [which in banner know]): - whether installing component cuase / require reboot (currently believe qwave , printing services require reboot)   - xml output, can't justify team looking see if can commality with full server   fwiw :j   hi,   oclist not have qualifiers or ways change output. when iis came in late, make oclist output longer, unfortunately late make significant changes.   i'll take feedback , add our list next version.   thanks,   andrew   ...
Read more