IAS Authentication With XP Workgroup Client

I have setup a IAS server (Win2003 Server) in a domain using PEAP. My XP
clients who are members of the domain can connect OK.

However, I have some laptops that are on workgroups that require access to
the wireless network. I have exported the root CA certificate from my CA to
the certificate store on the laptop and have created an 'account' for the
laptop in AD.

What else do I need to do to get the workgroup clients working? I was
expecting to get a username/password prompt on the laptop when trying to
connect to the wireless network.

In news:4106B2B1-57B8-427B-A375-(E-Mail Removed),
Hiwj <(E-Mail Removed)> stated, which I commented on below:
> I have setup a IAS server (Win2003 Server) in a domain using PEAP. My
> XP clients who are members of the domain can connect OK.
>
> However, I have some laptops that are on workgroups that require
> access to the wireless network. I have exported the root CA
> certificate from my CA to the certificate store on the laptop and
> have created an 'account' for the laptop in AD.
>
> What else do I need to do to get the workgroup clients working? I was
> expecting to get a username/password prompt on the laptop when trying
> to connect to the wireless network.

How did you setup the wireless interface on the workgroup laptops? Did you
specify PEAP? Are you using autoenrollment? Is the CA Win2003 Enterprise
Edition? If so, did you create an autoenrollment cert for your AD users? Did
you also have the workgroup users connect to the CA's website and request a
cert for this purpose, approve the request, and install it on their laptop?

As you can see, there are numerous questions regarding your current config.
I would think this question would be better suited for the
microsoft.public.security.crypto newsgroup created specifically for CA
issues.

--
Ace
Innovative IT Concepts, Inc (IITCI)
Willow Grove, PA

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.
It's easy:

How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Infinite Diversities in Infinite Combinations
Assimilation Imminent. Resistance is Futile
"Very funny Scotty. Now, beam down my clothes."

The only constant in life is change...