Suggestions please? I can't organise my thoughts properly at the moment, so many things going on at once at the same time as trying to sort this out and it's starting to stress me outĬheers ADMaster, will take a look at dynamic vlan assignment (The only thing i was thinking i'd do with this one is making it hidden)

Though these will likely have exactly the same restrictions as the studetns one. Mobile devices - the ipads, learnpads, surfaces that belong to the school. Do i need to just connect them all using a basic student account and have them save the settings in the same essence as a PSK would? I don't mind getting the kids to put in their usernames to connect to the wireless on the surfaces but on the iPads and learnpads i need the wifi to be ever present regardless of who's using it. Obviously all of those on different platforms, and i'd like them to connect to an enterprise wireless. We've got some iPads, we've got some learnpads, we've got some surfaces (RT).

but I think i need an idea as to how some others do their wireless overall with RADIUS. I've now worked out how to setup my SSIDs with corrosponding profiles correctly, and i know how to split people in to differing groups such as a students SSID with more restrictive firewall rules etc. Is this a typical issue others have seen? Obviously i guess i don't want to force it to wait for the network as, if a device leaves the network and wants to login with offline files or a local login, it'd be waiting forever?ĮDIT: I think i get it, it's because i have single sign on turned on, what i really need is machine authentication.not sure how to configure that yet. Trying to login even repeatedly without returning to the ctrl+alt+del screen for 5 minutes won't allow it, once i let it go back to the ctrl+alt+del screen and go back in, it'll use the wireless profile and login fine. BUT in actual fact, if I'm too quick to press ctrl+alt+del after a restart i don't get the 'Windows will try to connect to Test-Network' under the password box.it seems i have to let it sit on the ctrl+alt+del screen for 5-10 seconds before trying to login will have that text there. Now GP deployed, i've restarted and i get no machine authentication, so at that point i think to myself i've missed something. I've deployed a wireless profile via GP to a test machine and removed any other SSIDs from it. I've got a working RADIUS server, a test SSID that's setup to connect to that radius server, and as a logged in user i can connect fine. So I've FINALLY got round to attempting to bring our wireless into the 21st century.

Powershell radius test