I have 14 AP-93's throughout my building. I finally got NPS setup to work with the AP's with Radius. Everything is fine, and my users can connect.
The last part of my project is restricting access to the internal network, depending on active directory security groups. I want my domain admins and a specific wifi_admins group to be able to access the internal network, but everyone else only to be restricted from internal network access. What would be the best way to achieve this? I tried IP filtering, but seeing as all the traffic doesn't run through my DC, NPS IP filtering doesn't seem like the ticket.
Any help is greatly appreciated. I'm almost done with this project, and I want to finish it soon. This is the last piece.