Anyone rolled out 802.1x supplicant in a large Microsoft AD environment?

[cbelcher]

Morning all, anyone have any suggestions how I can rollout Microsoft's native 802.1x supplicant to a large number of PC's.  I've got ISE and serveral different versions of Windows (xp, 7) working in a lab, but not being a Microsoft AD guy I'm kind of clueless how to pull this off.  Can it been done via a group policy?  If so has anyone got a good document how to pull this off? 

[ROBERT ELLENDER]

We rolled it out using Group Policy to enable the native supplicant on Win XP SP 3 and Win 7 and set the appropriate options for our ISE implementation.  (It was actually done by our Server/AD Engineers - so I don't have any details on the "magic" they perform - but it is being done through Group Policy)

[cbelcher]

Well it's good to know that I don't need to touch 1500 pc's .  My AD guys can't even spell 802.1x and thus want me to come up with the "magic".  Thanks Robert! 

[Tarik Admani · Accepted solution]

It is really simple, you can follow the guide here in the technet kb:

http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/7220c686-e033-4903-b40e-bf3b7e581d05

There are other threads that can show you how to do this on the wireless side as well. Make sure the AD guys set the correct eap types (peap or eap-tls) and you should be good to go.

Tarik Admani
*Please rate helpful posts*

[cbelcher]

Thanks Tarik!