Wireless Re Authentication

[ciscofreak1241]

Hi, I have a WLAN solution implemented. I am running Microsoft CA, IAS (RADIUS), and Active Directory. In my wireless configuration we are using WPA/TKIP and EAP Authentication (PEAP with MS-CHAPv2 or PEAP with EAP-TLS). Everything works perfectly, but whenever I use my laptop again it reauthenticates me without asking me to enter my credentials. I turn on my wirless card and it connects automatically as if my crententials are cached. I believe this something I need to do on the Microsoft Server, but I don't know what. Please advise what I can do to always force authentication? Thanks

 

[ADB100]

This is a feature of the Microsoft 802.1x supplicant and is by design - read the Wireless Authentication with 802.1x:

http://www.microsoft.com/technet/itsolutions/network/wifi/wififaq.mspx

The credentials are cached in the registry in the user hive for each user:

[-HKEY_CURRENT_USER\Software\Microsoft\Eapol\UserEapInfo]

Some stuff here:

http://www.humanrights.uio.no/english/about_nchr/it/wlan/peapforxp.html

You can set up a scheduled task to run each time the computer starts to remove the registry key with the following command:

C:\WINDOWS\system32\reg.exe delete HKEY_CURRENT_USER\SOFTWARE\Microsoft\EAPOL\UserEapInfo /f

Add it as a Scheduled Task and set it to start in "%SystemRootrun%\System32" and to run "At System Startup"

HTH

Andy