+ Post New Thread
Results 1 to 15 of 15
Windows Thread, Wireless policy losing settings in Technical; I made a topic before a while back but the problem has come about more frequently this time and I ...
  1. #1

    Join Date
    Apr 2007
    Location
    Bournemouth
    Posts
    72
    Thank Post
    13
    Thanked 4 Times in 2 Posts
    Rep Power
    16

    Wireless policy losing settings

    I made a topic before a while back but the problem has come about more frequently this time and I feel I could explain it better.

    What we have is several schools set up like this:

    Self SSL certificate made on server 03 pushed out by a GPO to clients.
    Radius server with shared secret with several Cisco Aironet 1200 APs.
    PEAP-WPA Mschapv2 security authentication all sent via GPO.

    What happens is, most of the time they work fine, then all of a sudden a few laptops will stop connecting when booted up and they need a policy refresh to log in. It's almost as if a GPO stops working for some reason. I would set up a local policy and put the settings in there, but it looks like you have to put the settings in manually as opposed to having a local policy of some sort.

    At one of my schools when this happens sometimes the adapters just stop working properly and you have to literally reinstall them, once you do, they instantly start connecting.

    I'm wondering whether when they run out of power the time is lost as is some of the GPO settings? Or is it that we are using pretty poor WLAN cards (atheros and dell cards) or do others use them well?

    I don't know the best way to make the policy stick? Any ideas?

    Sorry for the rant, thanks in advance (woffle woffle woffle)

  2. #2

    Join Date
    Apr 2007
    Location
    Bournemouth
    Posts
    72
    Thank Post
    13
    Thanked 4 Times in 2 Posts
    Rep Power
    16
    Does anyone use GPOs to push out wireless at all?

  3. #3

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,317
    Thank Post
    681
    Thanked 1,650 Times in 1,471 Posts
    Rep Power
    425
    Hi Bobo,

    We notice this same issue at times most of our laptops run intel b/g cards.

    Ben

  4. #4

    Join Date
    Apr 2007
    Location
    Bournemouth
    Posts
    72
    Thank Post
    13
    Thanked 4 Times in 2 Posts
    Rep Power
    16
    Thanks for the response, seems like a pain that shouldn't happen, do you think putting the settings locally would help?

  5. #5

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,572 Times in 1,252 Posts
    Rep Power
    340
    I've never been properly successful pushing out wireless settings by GPO. Setting up wireless settings locally does work reliably in my experience. I'm guessing you are using Windows XP/Vista's wireless utility and not a third party Intel utility?

  6. #6

    Join Date
    Apr 2007
    Location
    Bournemouth
    Posts
    72
    Thank Post
    13
    Thanked 4 Times in 2 Posts
    Rep Power
    16
    Yes, wireless zero, don't find any third party utilities to be as reliable (even if they always seem to have better connection, strength, can see each individual AP and can roam a lot better).

    Through GPOs it works very well, but its those odd few, I dont know how it can just "lose" settings, I mean, it's not like each time the computer logs off all the Group policy settings are set back to zero.

  7. #7
    Irazmus's Avatar
    Join Date
    Feb 2006
    Location
    Suffolk
    Posts
    316
    Thank Post
    13
    Thanked 22 Times in 17 Posts
    Rep Power
    23
    We have a similar setup and experience a similar problem. For us it's always the certificate that gets lost so a quick reboot while hardwired sorts it.
    It also happens fairly rarely (~once a month) so I don't worry about it too much.

  8. #8

    Join Date
    Apr 2007
    Location
    Bournemouth
    Posts
    72
    Thank Post
    13
    Thanked 4 Times in 2 Posts
    Rep Power
    16
    Seems like it is a fairly common problem, has noone found a workaround, or will putting in the certificate manually sort this out?

  9. #9

    Join Date
    Apr 2008
    Posts
    64
    Thank Post
    10
    Thanked 2 Times in 2 Posts
    Rep Power
    14
    Have the same difficulty here, pretty much identical except we're using nortel ap's. As you say, it just forgets settings. Logging on to the laptop while wired refreshes the policy and all is good again - for a while.
    I've been trying to understand if there is any pattern to it, i.e. is it the same laptops losing settings each time? Could it be that the laptops losing the settings are laptops that perhaps haven't been logged on to at all for XX days, and some thing gets reset in this time (thinking along the lines of dhcp scavenging although I know radius is not supposed to work like this). All dell latitude d531s here with intel a/g cards using the windows zero service.

  10. #10

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,572 Times in 1,252 Posts
    Rep Power
    340
    Just a thought, does the certificate expire after x amount of days if not re-connected to the network? or can you specify a number of days it's valid for?

    I'm working at a school I setup about 80% wireless and 20% wired and I manually configured WEP information manually on each laptop. This has worked perfectly for about 3 months now. Not a single problem of a laptop being unable to find the network or unable to get an IP.

  11. #11

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,317
    Thank Post
    681
    Thanked 1,650 Times in 1,471 Posts
    Rep Power
    425
    I'm not using a certificate at the moment.

    I still get laptops occasionally not connecting.

    Just starting to modify the cards to stop kids being able to turn the radios off and updating to the april 2008 released version of the 2200bg driver.

    Ben

  12. #12

    Join Date
    Apr 2007
    Location
    Bournemouth
    Posts
    72
    Thank Post
    13
    Thanked 4 Times in 2 Posts
    Rep Power
    16
    Quote Originally Posted by itwasntme View Post
    Have the same difficulty here, pretty much identical except we're using nortel ap's. As you say, it just forgets settings. Logging on to the laptop while wired refreshes the policy and all is good again - for a while.
    I've been trying to understand if there is any pattern to it, i.e. is it the same laptops losing settings each time? Could it be that the laptops losing the settings are laptops that perhaps haven't been logged on to at all for XX days, and some thing gets reset in this time (thinking along the lines of dhcp scavenging although I know radius is not supposed to work like this). All dell latitude d531s here with intel a/g cards using the windows zero service.
    I was thinking more along the lines of power? Maybe if you run out of power and the time is reset, the certificate expires as the date is before certificate creation?

    @Michael, you say you manually added the settings? Is this including a certificate or just encryption?

  13. #13

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,069
    Thank Post
    210
    Thanked 430 Times in 310 Posts
    Rep Power
    144
    Old thread reserrected from the depths of the forum, but I'm having a very simelar problem to the ones described in this thread and was wondering has anyone ever found a solution to this?

    In all other respects my wireless network works fine, but ocassionally I get clients that just will not authenticate to it unless I wire them onto the network and do a GPupdate then re-boot them, very strange problem and not been able to find any sort of pattern to it yet.

    So if anyone can shed light on why this happens, I'd ve very grateful!

    Mike.

  14. #14

    Join Date
    Oct 2005
    Location
    East Midlands
    Posts
    740
    Thank Post
    17
    Thanked 106 Times in 66 Posts
    Rep Power
    37
    Quote Originally Posted by Michael View Post
    Just a thought, does the certificate expire after x amount of days if not re-connected to the network? or can you specify a number of days it's valid for?

    I'm working at a school I setup about 80% wireless and 20% wired and I manually configured WEP information manually on each laptop. This has worked perfectly for about 3 months now. Not a single problem of a laptop being unable to find the network or unable to get an IP.
    I think the problem sometime with it is that the computer account's password expires and then it can't connect with radius. Plugging in on the network (wired) will correct this as the computer account's password is correctly update and then future wireless logons succeeds. This will happen in 802.1x authentication with radius server.

    Usually the password would expire in 30 days time or something.

    Found this links which states that by default the computer account's password expires every 30 days which may explain things.

    http://technet.microsoft.com/en-us/l...8WS.10%29.aspx

    I'm not sure if MS did a patch for this not.

    Ash.
    Last edited by spc-rocket; 21st October 2009 at 05:06 PM. Reason: Found link with more info

  15. Thanks to spc-rocket from:

    maniac (22nd October 2009)

  16. #15

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,069
    Thank Post
    210
    Thanked 430 Times in 310 Posts
    Rep Power
    144
    Quote Originally Posted by spc-rocket View Post
    I think the problem sometime with it is that the computer account's password expires and then it can't connect with radius. Plugging in on the network (wired) will correct this as the computer account's password is correctly update and then future wireless logons succeeds. This will happen in 802.1x authentication with radius server.
    That's a perfectally plausable explanation, and there's a group policy setting for stopping machine accounts expiring so I'm going to enable that and see what happens!

    Mike.

SHARE:
+ Post New Thread

Similar Threads

  1. Group Policy - Proxy Settings
    By faza in forum Wireless Networks
    Replies: 15
    Last Post: 7th May 2008, 03:33 PM
  2. Replies: 2
    Last Post: 12th November 2007, 04:52 PM
  3. LANView3 Group Policy IE Proxy Settings
    By kennylang74 in forum Network and Classroom Management
    Replies: 0
    Last Post: 30th July 2007, 09:22 AM
  4. Office XP Group Policy Settings
    By ZeroHour in forum How do you do....it?
    Replies: 0
    Last Post: 5th July 2007, 09:32 AM
  5. Group Policy Settings Examples
    By mattpant in forum Wireless Networks
    Replies: 20
    Last Post: 17th September 2005, 11:12 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •