Authenticate Users AND Computers

[Alex Moffitt]

I have recently set up IAS and EAP-MSCHAP v2 using self a self signed
certificate

The problem I am facing now is, the IAS is allowing non domain
computers to access the wireless based purely on credentials. I want
to make it so they are only allowed on if they have a vaild username
and password AND their computer is part of the domain. Not either or.
Does any one have any ideas?

[James McIllece [MS]]

Post by Alex Moffitt
I have recently set up IAS and EAP-MSCHAP v2 using self a self signed
certificate
The problem I am facing now is, the IAS is allowing non domain
computers to access the wireless based purely on credentials. I want
to make it so they are only allowed on if they have a vaild username
and password AND their computer is part of the domain. Not either or.
Does any one have any ideas?

Neither EAP-MS-CHAP v2 nor EAP-TLS provide dual authentication as you
describe.

It might be possible that there is a third party EAP type that you can
purchase that does provide dual authentication, but if it exists, I am not
aware of it.