Background:
Cisco Aironet 1230A access points
Cisco WLSE
Cisco ACS
Cisco PCMCIA Wireless Adapters in laptops with LEAP authentication
Microsoft Active Directory
Computer-Based GPOs not processing
Problem:
Because LEAP requires the user to log on to the computer/domain before it will place the computer on the network, the computers will not get Computer-based GPOs. GPOs are a feature of Microsoft Active Directory to control settings on the computers and users. User GPOs process with no problems. The computer GPOs will not process or run because the computer is never on the network until the user logs in, by that time it is too late to process the computer-based GPO. We investigated the problem with Microsoft but it is felt that the LEAP authentication it stopping the computers from processing any scripts or GPOs when the computer starts up.
Things that we have tried but still fails:
There is a setting on the client to have it log on with a username. This does log the computer onto the network prior to the user logging on but, it is still not soon enough for the Computer-based GPOs to process.
Suggestions and/or Questions:
Is there a way with LEAP to have the computer logon to the wireless network fast enough for Computer-based GPOs to process and run? We feel that Cisco would have to have addressed this problem with Microsoft at some point in time.
