Hi

We are a few months away from rolling out PacketFence to our network and I
would like to make sure we are following the best practises to ensure it is
as secure as possible.

At the moment we have tested and it works great with Cisco 2960 switches
and 802.1x.

My next testing is it use laptops that are connected to a Windows Server
2008r2 domain.

Currently the laptops have very limited access when they boot up as they
start off in the registration VLAN.

My question today is regarding computer start up group policies on domain
machines.

I have read you can change some group policies settings so when the users
presses ctrl,alt+del and logs in with their AD username and password this
also "triggers" the 802.1x process to put them in the correct VLAN. This is
obviously after the computer has booted up.

Does anyone have any documentation on what I need to allow in the
registration VLAN so I don't break Group Policies start up policies?

Thanks,

-- 
Regards,

Steve Allen
------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to