Multiple SSID authentication and NPS

[rajitoor55]

We are trying to setup a new SSID for only certain group of AD users. We already have another SSID which allows all domain users after authentication. On testing I found it doesn't matter if I was in the new allowed AD group or not, I always successfully authenticated on the new SSID. How can I make only selected group to authenticate.

[Scott Fella]

If you have 802.1x working then you would create a new radius policy, place it in front of the existing policy to only authenticate that user group. It’s all about modifying the policies and placing them in the proper order. Hope that helps.