Speaking of 802.1x... We're experimenting with different options to try to make authentication as seamless as possible to end users. Installing a program / running a script is not a great option, or so I'm told anyway.
We've had success with testing a Microsoft certificate authority as the primary means of authentication. Once a user has the certificate, everything is seamless and simple. Trouble is in deploying the certificate. Does anyone use certificates to authenticate AD user accounts (with non-domain member computers)? If so, how do users obtain the certificate? If you use the default Microsoft web-based process, do you just tell firefox users they are out of luck? How do you handle Macintosh clients? Alternatives? Jacob Barros Network Security Administrator Office of Information Technology (formerly GCCS) Grace College and Seminary ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
