Turn off "machine authentication"

[ABOzIT]

We have a global wireless network using IAS for authentication & public class 3 certificate but there are a handful of clients that fail to connect because they seem to be using "machine" authentication" and not the user's domain account.

Looking at the IAS logs 99% of the clients use domain\username but the ones that are failing appear as host/machine name.

I have checked settings between one that works and one that doesn't and there seems to be no difference.

How do I turn off machine authentication on these clients so the domain\username is sent to IAS?

Thanks!

 

[unclerico]

did you delete the default Domain Computers IAS policy??

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[ADB100]

Its a registry setting on the XP clients that can be set via group policy in AD (assuming the clients are Domain Members). The default behaviour of the XP 802.1x supplicant is to attempt machine authentication when no user is logged on and then once a user logs on attempt user re-authentication.

http://www.velocityreviews.com/foru...cantmode-settings-for-wired-and-wireless.html

http://www.velocityreviews.com/forums/t26435-windows-xp-authmode-for-secure-wireless.html

Andy