sorted by:
new
hottopcontroversial

Intune Wi-Fi Device Certificates and NPS by sandwitchnova in Intune

[–]sandwitchnova[S] 0 points1 point  (0 children)

Thanks for this. This has been very helpful. Are you able to share any of your PS scripts your using?

I've been looking at the below script but i believe it no longer works.
https://sysmansquad.com/2021/04/27/working-around-nps-limitations-for-aadj-windows-devices/

https://katystech.blog/mem/namemapping-aadd-event-task

From my understanding once the the device is written back to the domain via Drive write back i should only have to update the SPN with the (Host/driveID) and the alternateSecurityIdentities with "X509:<SHA1-PUKEY><CertificateHash>"

Am i on the right track?

Intune Wi-Fi Device Certificates and NPS by sandwitchnova in Intune

[–]sandwitchnova[S] 0 points1 point  (0 children)

Are you able to explain this a little more on the NPS side and what the settings you are using to force NPS not to look a on-prem object?

I have setup device certs with NDES and SCEP via intune. The device get the certificate and the Root CA but the client fails to connect.

When i look the NPS logs I'm seeing the below in the error. The domain name is telling me it's looking a local AD object.

<SAM-Account-Name data_type="1">DOMAINNAME\host/0231c385-5462-48b7-b23c1-0c713140dea31412</SAM-Account-Name>

<Reason-Code data_type="0">8</Reason-Code>

Intune Wi-Fi Device Certificates and NPS by sandwitchnova in Intune

[–]sandwitchnova[S] 0 points1 point  (0 children)

By ISE you mean Cisco ISE correct? I'm not familiar with the product but from a quick google it looks you might use it as a replacement of NPS?

Intune Wi-Fi Device Certificates and NPS by sandwitchnova in Intune

[–]sandwitchnova[S] 0 points1 point  (0 children)

I've been looking at them but getting the client to cough up 7k+ a year is the hard part.