IAS Event 2, Reason Code 262

Hi, I'm having a little problem with IAS. We're using IAS to authenticate
wireless workstations, and I have used ghost to copy an image which included
the certificate for IAS. On one workstation, IAS refuses to acknowledge the
machine, citing Reason-Code 262 (full event log below). All the other
machines seem fine however.

Looking though the event log, I also get IAS Event 3, and Event 5052 for the
same laptop

Any input on this greatly appreciated!

Many Thanks

William Mann
Trinity Catholic High School


Source IAS Event ID 2

User host/scitng12.trinity.school was denied access.
Fully-Qualified-User-Name = trinity.school/Trinity
Computers/workstations/science laptops/SCITNG12
NAS-IP-Address = 10.201.252.216
NAS-Identifier = 10.201.252.216
Called-Station-Identifier = 000B8641B380
Calling-Station-Identifier = 0018DEADEB50
Client-Friendly-Name = Aruba 2400
Client-IP-Address = 10.201.252.215
NAS-Port-Type = Wireless - IEEE 802.11
NAS-Port = 2
Proxy-Policy-Name = Use Windows authentication for all users
Authentication-Provider = Windows
Authentication-Server = <undetermined>
Policy-Name = Computer Access
Authentication-Type = PEAP
EAP-Type = <undetermined>
Reason-Code = 262
Reason = The supplied message is incomplete. The signature was not
verified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

---
Source IAS Event ID 3

Access request for user SCITNG12\Administrator was discarded.
Fully-Qualified-User-Name = SCITNG12\Administrator
NAS-IP-Address = 10.201.252.216
NAS-Identifier = 10.201.252.216
Called-Station-Identifier = 000B8641B380
Calling-Station-Identifier = 0018DEADEB50
Client-Friendly-Name = Aruba 2400
Client-IP-Address = 10.201.252.215
NAS-Port-Type = Wireless - IEEE 802.11
NAS-Port = 11
Proxy-Policy-Name = Use Windows authentication for all users
Authentication-Provider = Windows
Authentication-Server = <undetermined>
Reason-Code = 5

---
Source IAS Event ID 5052

There is no domain controller available for domain SCITNG12.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Don't include the Cert in the image.

After the machie is imaged it also has to be renamed and also has to have the
SID altered (Ghostwalker, NewSID, etc). Then install the Cert.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

The views expressed (as annoying as they are, and as stupid as they sound), are
my own and not those of my employer, or Microsoft, or anyone else associated
with me, including my cats.
-----------------------------------------------------


"Trinity Catholic High School"
<(E-Mail Removed) om> wrote in message
news:4EDA7E09-CD96-4607-9545-(E-Mail Removed)...
> Hi, I'm having a little problem with IAS. We're using IAS to authenticate
> wireless workstations, and I have used ghost to copy an image which included
> the certificate for IAS. On one workstation, IAS refuses to acknowledge the
> machine, citing Reason-Code 262 (full event log below). All the other
> machines seem fine however.
>
> Looking though the event log, I also get IAS Event 3, and Event 5052 for the
> same laptop
>
> Any input on this greatly appreciated!
>
> Many Thanks
>
> William Mann
> Trinity Catholic High School
>
>
> Source IAS Event ID 2
>
> User host/scitng12.trinity.school was denied access.
> Fully-Qualified-User-Name = trinity.school/Trinity
> Computers/workstations/science laptops/SCITNG12
> NAS-IP-Address = 10.201.252.216
> NAS-Identifier = 10.201.252.216
> Called-Station-Identifier = 000B8641B380
> Calling-Station-Identifier = 0018DEADEB50
> Client-Friendly-Name = Aruba 2400
> Client-IP-Address = 10.201.252.215
> NAS-Port-Type = Wireless - IEEE 802.11
> NAS-Port = 2
> Proxy-Policy-Name = Use Windows authentication for all users
> Authentication-Provider = Windows
> Authentication-Server = <undetermined>
> Policy-Name = Computer Access
> Authentication-Type = PEAP
> EAP-Type = <undetermined>
> Reason-Code = 262
> Reason = The supplied message is incomplete. The signature was not
> verified.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
> ---
> Source IAS Event ID 3
>
> Access request for user SCITNG12\Administrator was discarded.
> Fully-Qualified-User-Name = SCITNG12\Administrator
> NAS-IP-Address = 10.201.252.216
> NAS-Identifier = 10.201.252.216
> Called-Station-Identifier = 000B8641B380
> Calling-Station-Identifier = 0018DEADEB50
> Client-Friendly-Name = Aruba 2400
> Client-IP-Address = 10.201.252.215
> NAS-Port-Type = Wireless - IEEE 802.11
> NAS-Port = 11
> Proxy-Policy-Name = Use Windows authentication for all users
> Authentication-Provider = Windows
> Authentication-Server = <undetermined>
> Reason-Code = 5
>
> ---
> Source IAS Event ID 5052
>
> There is no domain controller available for domain SCITNG12.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.