Radius only allowing domain admins

[dave.81]

I'm setting up Radius for the first time and so far have it working fine for myself and others who are registered as domain admins but no one else. I've added the domain user group to the conditions but when anyone tries to connect the are told they have incorrect username or password.

 

Cant understand why Admins can but no other users can when both are added the same way.

[pete]

What do the event logs say?

 

You should get something along the lines of "I told user/machine to get stuffed because" in the security log on the RADIUS server. Look for event ID 6273 and see what reason it gives (I'll place a small bet it says "The connection request did not match any configured network policy").

 

Also, RADIUS policy order matters (like firewall rules do). A deny at the start of the list will override an allow lower down.

Edited June 3, 2015 by pete

[dave.81]

Thanks you pointed me in the right area. Took out the admins for the conditions list and left in just the users and it seems to work ok now. Seems windows groups dont work but user groups did as well.