Enable 802.1X Authentication Service wired AutoConfig

Source: Internet
Author: User

Today, I just changed my book, t400 mz5, and I am very excited. After a tight installation, I can access my LAN, but I cannot connect to the company's network.

Analysis Environment:

1. Windows XP SP3 System

2. Security Software: security guard 360 and TrendMicro OfficeScan 2007

3. the company's network adopts the dynamic VLAN mode of Cisco. It authenticates users through Cisco ACS, issues certificates to users, and assigns IP addresses to user subnets through domain DHCP.

 

Cause analysis:

1. The windows 3server version has been used before the change of the device. Because the new system has an XP system, the switch should be used. In the past, the normal judgment should be related to the XP system.

2. Check that the ACS certificate can be normally distributed (EAP authentication, three related certificates are available and enabled), but IP addresses cannot be obtained.

3. Analysis is a problem in the authentication process. Check that wired AutoConfig is not enabled and is in the manual status.

After it is changed to automatic start, everything is normal.

 

How to enable wired AutoConfig? Here is my Excerpt from example.

 

 

Group Policies start system services. 802.1X, Windows XP SP3, and wired AutoConfig are deployed on the network. By default, the system cannot pass authentication. Is there any way to enable the service in a unified manner.

A: According to your description, I understand this question: to deploy 802.1x in the XP SP3 client environment, I want to use the Group Policy to enable the wired AutoConfig Service of all clients.
We can use GPO to control the startup types of some services, but the wired AutoConfig Service is not in the list. Here we use another method: use the shutdown script to set the Startup Type of the wired AutoConfig Service on the client to automatic.

Follow these steps to set the shutdown script on the DC:
1. Use notepad to create the following two files and paste the content between =: the article you see comes from the Active Directory Seo http://gnaw0725.blogbus.com/c1404554/

A. dot3svc_start.reg
=
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE/system/CurrentControlSet/services/dot3svc]
"START" = DWORD: 00000002
=

B. dot3svc. bat
=
Regedit/S // domain.com/sysvol/domain.com/scripts/dot3svc_start.reg
=

2. Copy the two files:
// Domain.com/sysvol/domain name/scripts

3. Use Aduc to move the XP SP3 client to an ou, then create a GPO and edit the following policy: the article you see comes from the Active Directory Seo http://gnaw0725.blogbus.com/c1404554/
/Computer configuration/Windows Settings/scripts/Shutdown

4. After clicking Add, specify dot3svc. Bat created in step 1 as the shutdown script:
// Domain.com/sysvol/domain.com/scripts/dot3svc.bat

5. After all xp sp3 clients restart, the wired AutoConfig Service will be automatically started. After confirmation, you can delete the GPO.

For more information about this solution, see the following article: The article you see comes from the Active Directory Seo http://gnaw0725.blogbus.com/c1404554/
You cannot connect to an 802.1x wired network after you upgrade to Windows XP Service Pack 3
Http://support.microsoft.com/kb/953650

Muyun, Microsoft Global Technical Support Center

For more information about group policy scripts, see
Group Policy scriptTutorial | vbsbat domain user logon script activity directory Seo
How to automatically add domain accounts to the local administrator group | Active Directory domain of ADGroup PolicyLoginScriptActivity catalog Seo
Domain user logonScriptActivity catalog Seo
Group PolicyDisable Seo using USB Active Directory
Group PolicySet | Registry permission activity directory Seo

Group PolicyDelete the local administrator group account activity directory Seo
Group PolicyGPO ing network shared folder Active Directory Seo
Batch modify domain user logonScriptActivity catalog Seo
Http://www.googlesyndicatedsearch.com/u/blogbus? Hl = ZH-CN & inlang = ZH-CN & newwindow = 1 & Ie = UTF-8 & Q = site: gnaw0725.blogbus.com + % E7 % BB % 84% E7 % ad % 96% E7 % 95% a5 % E8 % 84% 9A % E6 % 9C % AC & START = 10 & SA = N

For more information about group policies, seeGroup PolicyGroup Policy topic activity directory Seo

 

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.