windows wireless "User or Computer authentication"
hello experts
i am in a global company, in each office we have a unique wireless network SSID for travel users easy connect, and we have a GPO to control that.
for some reason some sites (site A) only authenticate "Domain Computers" group to connect, some sites (site B) authenticate both "Domain computers" and "Domain Users" groups, so for those site the GPO configured to using "User or Computer authentication" option like below screenshot, but if users from site B travel to site A, they can't connect to WIFI, because i think if the computer trying connect to WIFI, if user authentication failed it should try the alternative option which using computer to authenticate instead, but looks like it is not.
so my question is how to fix this issue which let the client computer trying to use computer auth if user auth failed.
thank you
i am in a global company, in each office we have a unique wireless network SSID for travel users easy connect, and we have a GPO to control that.
for some reason some sites (site A) only authenticate "Domain Computers" group to connect, some sites (site B) authenticate both "Domain computers" and "Domain Users" groups, so for those site the GPO configured to using "User or Computer authentication" option like below screenshot, but if users from site B travel to site A, they can't connect to WIFI, because i think if the computer trying connect to WIFI, if user authentication failed it should try the alternative option which using computer to authenticate instead, but looks like it is not.
so my question is how to fix this issue which let the client computer trying to use computer auth if user auth failed.
thank you
ASKER
hello
i just tried change mentioned options from 1 to 3, but it doesn't help, the windows laptop client still using user account to auth WIFI, so under which circumstances the windows client will try using computer account to auth instead?
thanks
i just tried change mentioned options from 1 to 3, but it doesn't help, the windows laptop client still using user account to auth WIFI, so under which circumstances the windows client will try using computer account to auth instead?
thanks
ASKER
also i found if i got the laptop reboot but do not login, it could connect to my WIFI automatic, and double checked the authentication server log it was using computer to connect, but once i login the laptop WIFI got disconnected and could not connect any more, and it is using user account connect to WIFI never tried computer account. any ideas?
thank you
thank you
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
hi Jakob
you mean once user account login, the windows client will never try auth via computer account right?
if yes are you totally sure?
if sure we can close this case then.
thanks
you mean once user account login, the windows client will never try auth via computer account right?
if yes are you totally sure?
if sure we can close this case then.
thanks
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
thank you
You may also want to check for certificates on the site A computers to verify that they are, in fact, able to authenticate as computers on the Site B wifi connection.