Internet Authentication Service

Internet Authentication Service (IAS) is the Microsoft implementation of a Remote Authentication Dial-in User Service (RADIUS) server and proxy in Windows Server 2003. As a RADIUS server, IAS performs centralized connection authentication, authorization, and accounting for many types of network access, including wireless and virtual private network (VPN) connections. As a RADIUS proxy, IAS forwards authentication and accounting messages to other RADIUS servers.

In Windows Server 2008, IAS has been replaced with Network Policy Server (NPS).

Introductory Overviews

• Internet Authentication Service
  Get an overview of IAS and detailed information from the full set of IAS product documentation provided with Windows Server 2003.
• Network Access Quarantine Control in Windows Server 2003
  Get a technical overview of the Network Access Quarantine Control feature of Windows Server 2003, including details about how it works and how to deploy it.
• The Advantages of Protected Extensible Authentication Protocol (PEAP)
  Get the background on the efforts of the IEEE and the Internet Engineering Task Force (IETF) to address secure wireless access and a comparison of PEAP with other standards-based and proprietary wireless authentication schemes.

Deployment Resources

• Windows Server 2003 Deployment Kit: Deploying IAS
  Get guidelines and recommended processes for designing and deploying IAS as a RADIUS server and proxy in this chapter of the Deploying Network Services book in the Windows Server 2003 Deployment Kit.
• Deployment of Protected 802.11 Networks Using Microsoft Windows
  Learn how to deploy Institute of Electrical and Electronics Engineers (IEEE) 802.11 wireless access with 802.1X authentication using wireless access points, Windows XP wireless client computers, and IAS in Windows Server 2003 or Windows 2000 Server.
• Deployment of IEEE 802.1X for Wired Networks Using Microsoft Windows
  Learn how to deploy secure wired access with IEEE 802.1X authentication using authenticating switches, client computers running Windows, and an authentication infrastructure that uses IAS in Windows Server 2003 or Windows 2000 Server.
• Deploying Wireless Provisioning Services (WPS) Technology
  Learn how to deploy WPS technology for a Wireless Internet Service Provider (WISP) network that allows you to provide pay-per-use, monthly service, and long-term Internet access to new and existing customers through wireless access points deployed in public areas.
• Obtaining and Installing a VeriSign WLAN Server Certificate for PEAP-MS-CHAP v2 Wireless Authentication
  Learn how to obtain and install a WLAN Server Certificate from VeriSign, Inc., on IAS RADIUS servers to enable password-based authentication for wireless connections using PEAP Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAP v2).
• Deploying SQL Server Logging with Windows Server 2003 Internet Authentication Service
  Learn three ways to deploy IAS SQL Server logging with Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE 2000).
• Deploying Windows Server 2003 Internet Authentication Service (IAS) with Virtual Local Area Networks (VLANs)
  Learn how to deploy Windows Server 2003 IAS with virtual local area networks (VLANs).
• Enterprise Deployment of Wireless & Remote Access with RSA SecureID and Microsoft Internet Authentication Service
  Learn how to configure RSA ACE/Server to provide a secure authentication solution for VPN and Windows XP 802.1X wireless clients running Microsoft Windows XP Service Pack 1 with the PEAP QFE installed.

Additional Resources

• Windows Server 2003 Technical Reference: IAS Technical Reference
  This section of the Windows Server 2003 Technical Reference contains in-depth technical information about IAS in Windows Server 2003.
• Windows Server 2003 Internet Authentication Service (IAS) Operations Guide
  Get administration information for IAS in Windows Server 2003 and Windows Server 2003 with Service Pack 1.
• Implementing Quarantine Services with Microsoft Virtual Private Network Planning Guide
  Learn how to configure Network Access Quarantine Control and remote access certificate provisioning in a test lab with five computers.
• Internet Authentication Service Extensions
  Get details from the Windows Platform Software Development Kit (SDK) about how to develop IAS extensions that implement session control and accounting plug-in dynamically linked libraries (DLLs), add authorizations, and use customized network authentication methods.