kenman

I solved this by adding the names of the MSM765 wireless controllers to the list of allowed workstations, since the authentication requests seem to be coming from the controller instead of the laptop. The issue is solved.

Hi, On the MSM-760 controller, there should be a place under "VSC Profile" to check off which modes and channels you wish to use. Just uncheck all except those you want to be active.

We have a situation where certain students accounts in Active Directory have been restricted with the "Log on to" option, which only allows these students to log onto certain machines, they can't join the wifi network. These students can log onto a laptop just fine if the laptop is plugged into the wired network, but if the laptop is just wireless, they can't log on, and get an "Authentication Failed" error. Has anybody else ever had this problem? We are using MSCHAP V2 as user authentication, no certificates. The wifi network and Radius server (server 2008r2) are all working as expected, as we have no issues with any other accounts, student or staff. It's just the accounts that have the above mentioned restrictions that can't get onto the network. I have demonstrated this problem time and again by removing the "Log on to" restriction, and the student account can connect to the wireless without issue. Re-instate the restriction, and they just can't get on the wireless. I can find no useful information in any error logs that might help pinpoint where the problem lies. The only thing I can think of is that the radius server is not a domain controller, so it has to pass on authentication requests from the wireless network to a domain controller. If the student uses a laptop that is hard-wired into the network, they don't go through the radius server, they connect directly to a domain controller. I think the radius server may be the problem, but, as I said, it's working for everything else. Somebody out there has to have suggestions or ideas I haven't tried yet.