Provide wired and wireless access

Updated: October 14, 2010

Applies To: Windows Server 2008, Windows Server 2008 R2

You can use the goals below to provide authenticated wired and wireless access to computers on your network.

  • Provide users with authenticated wireless network access and allow them to log on with a user name and password

  • Provide users with authenticated wireless network access and allow them to log on with a certificate installed on their computers

  • Provide users with authenticated wired network access and allow them to log on with a user name and password

  • Provide users with authenticated wired network access and allow them to log on with a certificate installed on their computers

Provide users with authenticated wireless network access and allow them to log on with a user name and password

To accomplish this goal, you need to deploy one or more wireless access points, Network Policy Server (NPS), and server certificates for use with 802.1X authentication.

To accomplish this goal using Windows Server® 2008, use the following guides:

To accomplish this goal using Windows Server® 2008 R2, use the following guides:

Provide users with authenticated wireless network access and allow them to log on with a certificate installed on their computers

To accomplish this goal, you need to deploy one or more wireless access points, Network Policy Server (NPS), server certificates, and either computer certificates or user certificates for use with 802.1X authentication.

To design your wireless access solution, see the following topics in the 802.1X Authenticated Wireless Access Design Guide at https://go.microsoft.com/fwlink/?LinkId=203317.

  1. EAP-TLS-based Authenticated Wireless Access Design at https://go.microsoft.com/fwlink/?LinkId=203318

  2. Planning for Wireless AP Deployment at https://go.microsoft.com/fwlink/?LinkId=203319

  3. Planning for Recommended Security Configurations at https://go.microsoft.com/fwlink/?LinkId=203320

To deploy your wireless access solution after you complete your design, see the following topics in the guide Deploying 802.1X Authenticated Wireless Access at https://go.microsoft.com/fwlink/?LinkId=203321.

  1. Checklist: Deploying 802.1X Authenticated Wireless Access

  2. Configure Wireless APs at https://go.microsoft.com/fwlink/?LinkId=203322

  3. Use Security Groups for 802.1X Authenticated Wireless Access at https://go.microsoft.com/fwlink/?LinkId=203323

  4. Configure Wireless Computers Running Windows Vista for 802.1X Authenticated Access at https://go.microsoft.com/fwlink/?LinkId=203340

  5. Configure Wireless Computers Running Windows Vista to Use PEAP-TLS at https://go.microsoft.com/fwlink/?LinkId=203324

  6. Configure Wireless Computers Running Windows Vista to Use EAP-TLS at https://go.microsoft.com/fwlink/?LinkId=203325

  7. Configure Wireless Clients Running Windows XP for 802.1X Authenticated Access at https://go.microsoft.com/fwlink/?LinkId=203326

  8. Configure Computers Running Windows XP to Use PEAP-TLS at https://go.microsoft.com/fwlink/?LinkId=203327

  9. Configure Computers Running Windows XP to Use EAP-TLS at https://go.microsoft.com/fwlink/?LinkId=203328

  10. Configuring NPS to Provide Authenticated Wireless Access at https://go.microsoft.com/fwlink/?LinkId=203330

To accomplish this goal, you must deploy server certificates and either user or computer certificates that are installed on client computers. Use the following guides to deploy your certificates.

To deploy certificates using Windows Server 2008, see the following guides:

To deploy certificates using Windows Server® 2008 R2, see the following guides:

Provide users with authenticated wired network access and allow them to log on with a user name and password

To accomplish this goal, you need to deploy one or more 802.1X-capable Ethernet switches, Network Policy Server (NPS), and server certificates for use with 802.1X authentication. For more information, see Foundation Network Companion Guide: Deploying 802.1X Authenticated Wired Access with PEAP-MS-CHAP v2 at https://go.microsoft.com/fwlink/?LinkID=134845.

To accomplish this goal, you must deploy server certificates. Use the following guides to deploy your certificates.

To deploy server certificates using Windows Server 2008, see Foundation Network Companion Guide: Deploying Server Certificates at https://go.microsoft.com/fwlink/?LinkId=108258.

To deploy server certificates using Windows Server 2008 R2, see Core Network Companion Guide: Deploying Server Certificates at https://go.microsoft.com/fwlink/?LinkId=158435.

Provide users with authenticated wired network access and allow them to log on with a certificate installed on their computers

To accomplish this goal, you need to deploy one or more 802.1X-capable Ethernet switches, Network Policy Server (NPS), server certificates, and either computer certificates or user certificates for use with 802.1X authentication. For more information, see 802.1X Authenticated Wired Access at https://go.microsoft.com/fwlink/?LinkId=187527.

To accomplish this goal, you must deploy server certificates and either user or computer certificates that are installed on client computers. Use the following guides to deploy your certificates.

To deploy certificates using Windows Server 2008, see the following guides:

To deploy certificates using Windows Server® 2008 R2, see the following guides: