Hey folks -
Basically have a NAP server that I want handling our VPN connections for domain and non-domain clients.
I've followed the guide here:
So I get the clients to connect - authenticate, and I make sure i setup the VPN connection to validate the cert, use NPS, etc etc.
My main issue is if it's a domain or non-domain system after it connects it coughs this out in the security log:
Connection Request Policy Name: NAP VPN
Network Policy Name: NAP VPN Non NAP-Capable
Authentication Provider: Windows
*nap vpn non nap-capable - being the setup from the wizard.
Anyone ever run into this? It simply won't let the systems connect and get through to the NAP-Capable policy. I've tried manually setting the VPN on the host to connect via PEAP and i've checked that my connection request policy allows PEAP and MS-CHAPv2 (as shown below in the sec log)
Authentication Type: PEAP
EAP Type: Microsoft: Secured password (EAP-MSCHAP v2)
Account Session Identifier: 323236
Pulling my hair out - any assistance would be appreciated.