Wireless group policy

[james]

We adding a wirelss network to or windows 2000 domain!
Cisco 1100 access points and fujitsu lifebooks with
windows xp! I have upgraded the drivers and loaded the
appropriate updates to take advantage of the the new wi-fi
encrytion standard wpa with tkip! here is were the
questions start! I am currently usng wpa with preshared
key and local mac filtering on the AP's. If our mac list
or psk ever fell into the wrong hands it would take for
ever to reconfig the network. CAn i use the radius built
in to win2000 to set ssid and the wpa encryption keys?
What about a centralized mac address server so i wouldn't
have to set up certs on every wirelss client(over 100
already in use!!!) is there such a thing in windows? Is
the only way to accomplish this is to upgarde to 2003 or
is there an update to 2000 that will add the wireless gp?
Can the win200 ias set the encryption keys? Thanks for
the help

James

 

[Shain Wray]

Hello James,

First, make sure you review the following KB -

815485 Overview of the WPA Wireless Security Update in Windows XP
http://support.microsoft.com/?id=815485

Then take a look at the following -

Download the Securing Wireless Lans Whitepapers here, this should answer
most of your questions -
http://www.microsoft.com/downloads/details.aspx?FamilyId=CDB639B3-010B-47E7-
B234-A27CDA291DAD&displaylang=en#filelist

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
prodtech/win2003/pkiwire/delivery/SWLANRN.asp

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/columns/c
ableguy/cg0303.asp

Best regards,
--
Shain Wray
Microsoft PSS Security Team

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit. Thanks!

 

[chris]

Hello,

This service allows to use PEAP authentication. But
is WPA planned to be supported on W2K ?

I found many posts asking this question but it is
never answered ...

We have a lot of W2K deployed and it would be hard
to migrate to XP just because of WPA support.

Thanks.

 

[Shain Wray [MSFT]]

Hello Chris,

At this point it is only supported via 3rd party. You need the 802.1x
client from -

http://www.microsoft.com/windows2000/server/evaluation/news/bulletins/8021xc
lient.asp

Best regards,
--
Shain Wray
Microsoft PSS Security Team

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit. Thanks!