Once you get a configuration that works, use netsh to distribute the configuration. Our install wrapper essentially does this: netsh.exe wlan disconnect interface="Wireless Network Connection" netsh.exe wlan delete profile "YourOldNetworkName" netsh.exe wlan delete profile "YourNetworkName" netsh.exe wlan delete profile "YourSetupNetworkName" netsh.exe wlan add profile filename="YourNetShExport.xml" interface="Wireless*" netsh.exe wlan disconnect interface="Wireless Network Connection" netsh.exe wlan connect name=YourNetworkName ssid=YourNetworkName interface="Wireless Network Connection"
At this point the balloons pop-up and the user enters their credentials. We get a little fancier than this but you get the idea. <><Randy ________________________________ From: Angela K Hollman [mailto:[EMAIL PROTECTED] Sent: Fri 8/31/2007 1:31 PM To: [email protected] Subject: Re: [WIRELESS-LAN] Machine Authentication in Vista More background info: We use machine authentication to authenticate our faculty machines through our radius setup as part of our 802.1x process. The students are being authenticated through the same radius servers and so we are seeing the machine auth logons. The big problem this is creating is that students' machines will startup and a windows message will appear (especially on Vista) telling them that the connection to our network has failed. This is machine authentication going through and failing on the wireless network. Then according to how quick the machine is the network does connect either seconds or minutes later. If we could eliminate machine authentication on Vista, the first logon to the wireless network should connect instead of failing. _________________ Angela K. Hollman Information Technology Services Network Analyst (308)865-8176 Hector J Rios <[EMAIL PROTECTED]> 08/31/2007 12:14 PM Please respond to The EDUCAUSE Wireless Issues Constituent Group Listserv <[email protected]> To [email protected] cc Subject Re: [WIRELESS-LAN] Machine Authentication in Vista Machine authentication will only work if your radius server supports it. If you don't have it set up, then I wouldn't worry about turning it off on the client machines. On our campus we authenticate both domain and non-domain users and in our instructions we just tell everybody to check "Authenticate as computer when information is available" (in XP, of course). The non domain users always get authenticate it against AD. From: Angela K Hollman [mailto:[EMAIL PROTECTED] Sent: Friday, August 31, 2007 11:57 AM To: [email protected] Subject: Re: [WIRELESS-LAN] Machine Authentication in Vista We are authenticating students against AD as non domain members so machine auth will not function. _________________ Angela K. Hollman Information Technology Services Network Analyst (308)865-8176 Hector J Rios <[EMAIL PROTECTED]> 08/31/2007 11:28 AM Please respond to The EDUCAUSE Wireless Issues Constituent Group Listserv <[email protected]> To [email protected] cc Subject Re: [WIRELESS-LAN] Machine Authentication in Vista Why do you want to turn off machine authentication? Just curious. From: Angela K Hollman [mailto:[EMAIL PROTECTED] Sent: Friday, August 31, 2007 8:44 AM To: [email protected] Subject: [WIRELESS-LAN] Machine Authentication in Vista Hello, Does anyone out there know where the button, checkbox or registry key is to switch machine authentication off in Windows Vista when doing 802.1x over wireless? In Windows XP, we simply uncheck the box labeled "Authenticate as computer when computer information is available." Sincerely, _________________ Angela K. Hollman Information Technology Services Network Analyst (308)865-8176 ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
