Solved

Can i set expiration duration of a network password?

Posted on 2011-09-25
8
265 Views
Last Modified: 2012-05-12
In our building (very large) we have a public wireless access in the front of the building since that's were our firewall (DMZ) lives. We have an encrypted wireless throughout the rest of the building for our staff.

Occasionally we have outside speakers who need internet access but are in a room outside the reach of teh public access point.

Can i give them temporary access to the non-public wireless network that would expire like in a day. And a password that's not the same as the staff access

Hope this made sense.
0
Comment
Question by:ronfast
  • 5
  • 2
8 Comments
 

Author Comment

by:ronfast
ID: 36595732
Just to clarify. . .
I have set up the default wireless access for the encrypted wireless network so the staff automatically have access to network resources (i.e. access file servers).

What I'm asking is if i can give an outside speaker only access to the internet and not the network resourses
0
 

Author Comment

by:ronfast
ID: 36595740
I know how to set a user account so it expires on a specific date in AD.
0
 
LVL 42

Expert Comment

by:kevinhsieh
ID: 36597351
You could make the account a member of domain guests (not domain users) and also a member of a group that has access to the wireless (assuming you don't want to give Domain Guests access to the Wi-Fi. This is assuming you use NPS as the RADIUS server to authorize wireless connections.
0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 
LVL 22

Accepted Solution

by:
chakko earned 500 total points
ID: 36597601
What I have done at one company is that I setup a group called NoAccess and then configured explicit DENY Access for that group to all resources which I thought were important.

So, when I encounter something like your situation I create a guest account and add it to the NoAccess group.  Similarly, I can 'lockout' a user from the LAN side if needed.  (I had this requirement before where management allowed an outgoing staff person to logon to their PC and access Outlook mail, but wanted all server resources blocked).
0
 

Author Closing Comment

by:ronfast
ID: 36600318
Thank you for the clear and concise solution. Perfect
0
 

Author Comment

by:ronfast
ID: 36943393
chakko, i don't know if you are still monitoring this question but if you are i have one more questiosn if you don't mind.
So since there is only 1 password to the encrypted wireless network i still give them this password and then just control their access in AD, right

thank you,
Ron
0
 
LVL 22

Expert Comment

by:chakko
ID: 36943683
That should probably work.  Their AD account can be used to deny access to Servers.

if your equipment supports the features, one option is to made another SSID on the Wireless and set that on a separate VLAN, then restrict that VLAN to only internet access.
0
 

Author Comment

by:ronfast
ID: 36943882
okay thanks again
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question