Security

We are starting a transition from PSK to Ent. We are a Windows shop and will be using NPS (Windows 2008). I was hoping that someone who has implemented this previously could give me some tips, hints or advice on the best way to go about this.

Thanks in advance.

Tim

Try this:

http://www.fatofthelan.com/technical/using-windows-2008-for-radius-authentication/

That's a pretty nice guide. They missed out the group policy bit but that's fairly straight forward.

You do not need to install any of the routing and remote access role, just the Network Policy Server.

Also, this is crucial, you need to register the network policy server to read active directory dial-in tab. Right-click NPS (Local), and then click Register server in Active Directory. When the Register Network Policy Server in Active Directory dialog box appears, click OK.