Other restrictions are also possible for Wi-Fi sessions: For example by defining working hours, time quotas. Now try opening a second Wi-Fi connection with Alice, it will be denied.Īdvanced Other restrictions you can apply to Wi-Fi connections You can see the session in the UserLock console. Make a Wi-Fi connection with one account (in this example the account "Alice"). Test the protection restricting all users to 1 concurrent Wi-Fi Session maximumĬreate a protected account called "Everyone" to apply this new rule to all users.Ĭonfigure the "Everyone" protected account (selecting “Properties”) to restrict each user to 1 concurrent Wi-Fi session maximum: Under the NPS server, run CMD (or PowerShell) as administrator and run the following commands (caution: it will disconnect all Wi-Fi connections active at that moment):įrom the UserLock Console, check that the status of the NPS agent is "Installed" Install the NPS UserLock Agent to the NPS Serverįrom the UserLock console, deploy the NPS agent on the NPS server: Verify that RADIUS Authentication and RADIUS Accounting are configured on your Wi-Fi access points. It is only possible with Interactive (desktop) and IIS sessions. RADIUS Authentication and Accounting are required for UserLock to manage Wi-Fi sessions.Ĭurrently, it is not possible to log off Wi-Fi (and VPN) sessions with UserLock. It is possible to configure RADIUS for Wi-Fi depending on access points. Wi-Fi is a standard for wireless communications. It is the successor of IAS used in editions up to Windows Server 2003. NPS is the Microsoft implementation of RADIUS from Windows Server 2008. Usually, RADIUS Authentication is on port 1812 or 1645, and RADIUS Accounting is on port 1813 or 1646.
RADIUS Authentication and RADIUS Accounting are two different things, and both are needed to be compatible with UserLock. RADIUS (Remote Authentication Dial-In User Service) is a protocol for authentication and accounting. That's why all instances of RADIUS Accounting are in bold. If RADIUS Accounting is not configured, UserLock will not receive logoff notifications, so its data will be incomplete.A Wi-Fi Access Point compatible and configured with RADIUS Authentication and RADIUS Accounting."NPS" refers to "Network Policy Server" (available for Windows Server 2008 and later editions) or "IAS" to talk about "Internet Authentication Service" (available for Windows Server 2003 and earlier editions).Note for this example we use the following conventions: This following example will give you a step-by-step guide on how to restrict users’ access to Wi-Fi sessions with UserLock, using RADIUS Authentication and RADIUS Accounting. Set up and restrict user access to Wi-Fi sessions
0 kommentar(er)
