NPS server for each AD Site

[Eric Kemsley]

Do I need to install a nps server for each active directory site? I have one 2504 controller and nps server for the the 10.13.x.x network and it is working fine.

I have another controller for our branch office 10.14.x.x Do I need to set up another nps server at the 10.14.x.x site?

TIA,

Eric

[Richard Atkin]

It depends on your requirements / network topology / distribution of AD Servers.

If you're just sticking a WLC at that remote site but there's no Domain Server there too, I wouldn't bother adding an NPS box as it doesn't really add anything to the solution... If the WAN link drops (and therefore your connection with AD also drops), you're scuppered! In this case, your best bet would be to add a second NPS box centrally, and then use both NPSs in parallel so you have some resiliency.

If you do have a Domain Controller at your branch office however, then there's certainly no harm in adding NPS as well as it will allow you to provide some continuity of service in the event of a failure.

[Eric Kemsley]

I do have a DC at that site so I will setup another nps server there.

Thanks!

[Abhishek Abhishek]

Hello Eric,

As per your query i can suggest you the following solution-

Need to install a nps server for active directory site depends upon the network topolgy and distribution of AD Servers.

If you are using WLC , no need to add NPS but if you have Domain Controller we need to add NPS.

When Network Policy Server (NPS) is a member of an Active Directory® Domain Services (AD DS) domain, NPS performs authentication by comparing user credentials that it receives from network access servers with the credentials that are stored for the user account in AD DS. In addition, NPS authorizes connection requests by using network policy and by checking user account dial-in properties in AD DS.

For NPS to have permission to access user account credentials and dial-in properties in AD DS, the server running NPS must be registered in AD DS.

Membership in Domain Admins , or equivalent, is the minimum required to complete this procedure.

To register the NPS server in the default domain by using the NPS console

1.Log on to the NPS server by using an account that has administrative credentials for the domain.

2.Open the NPS console.

3.Right-click NPS (Local) , and then click Register server in Active Directory . When the Register Network Policy Server in Active Directory dialog box appears, click OK .

Hope this will help you.