Log onto AD network over Wi-Fi?

[Asha'man X]

Hey again everyone

I've had a question brewing in my head for a while, and I've been unable to play around and discover an answer.

My question is this: If I had a wireless network at work, and I walked in with a laptop, switched it on, and tried to login to a domain, would it work straight away? I'm not very clued up on wireless unfortunately.

I know that the wireless adapter will and can pick up DHCP info from the Windows Server, so that helps with that. What about the encryption though? Or would the initial log in details be in clear air until you've actually logged into Windows and set it?

Our school doesn't have wi-fi hotspots, and may not have until next year sometime. If we had, I could have tested this out lol.

Thanks everyone.

 

[NetSpike]

Once you're connected via the wireless access point to the network, it's straight forward connecting to the Active Directory network just as you would connecting via ethernet cable.

You can save your wireless connection details (access point password etc.) and set that Windows automatically connect to that access point if it finds it upon Windows startup.

The details you sent via the wireless connection is secured via the encryption method set on the access point (such as WPA etc.). I would however suggest that you might want to try securing your Active Directory network using IPSec, which will protect you from packet sniffers.

Edward

 

[Asha'man X]

@ NetSpike

Thanks, that was very informative and helped a lot. Appreciate it. Now if only I could get my hands on some kit to play with here at work.

 

[andres101]

in short, probably not. wireless networks are (supposed to be) secured, meaning you have to enter a encryption key before being allowed access to the wireless network. once you are connected to the network, it works like a normal wired network.

WEP encryption is weak and can be cracked within seconds/minutes. WPA is more secure, as long dictionary words are not used as your key.

 

[mancombseepgood]

Most modern cards support pre login wifi authentication and connection including DNS, DHCP etc. The manufacturer has to support it AFAIK. Intel do on most cards. The thing is, you need to login first as admin and setup the Wifi network to automatically connect to the local access point. Once that is done, you can then join the AD from that machine - you will need help from the network admin to add your computer to the active directory though. If it's just for browsing the web etc (i.e. AD not required) then it will be more straight forward, but otherwise you will need the help of the admin. If the computer is already setup on the AD (using a regular network cable) then all you need to do is add the local wifi SSID to your list and reboot... make sure the feature to enable pre-login wifi authentication is enabled - usually only enabled when the Wifi manufacturer's own software controls your wifi profiles (i.e. not managed by windows)

Intel call theirs 'pre logon connect'
http://www.intel.com/support/wireless/wlan/sb/cs-014563.htm

 

[skydog]

Hey again everyone

I've had a question brewing in my head for a while, and I've been unable to play around and discover an answer.

My question is this: If I had a wireless network at work, and I walked in with a laptop, switched it on, and tried to login to a domain, would it work straight away? I'm not very clued up on wireless unfortunately.

I know that the wireless adapter will and can pick up DHCP info from the Windows Server, so that helps with that. What about the encryption though? Or would the initial log in details be in clear air until you've actually logged into Windows and set it?

Our school doesn't have wi-fi hotspots, and may not have until next year sometime. If we had, I could have tested this out lol.

Thanks everyone.

First Post in this section and a big thumbs up to the mods for creating it. hope it grows.

As has been mentioned, you have to connect to an AP (SSID) manually (unless it can be sent via Group Policy????)
one can have the SSID setup with authentication against the AD or RADIUS or the likes.

so yes possible. just know exactly what you want to do and i'm pretty sure there is a solution out there.

 

[AvOk]

Hey again everyone

I've had a question brewing in my head for a while, and I've been unable to play around and discover an answer.

My question is this: If I had a wireless network at work, and I walked in with a laptop, switched it on, and tried to login to a domain, would it work straight away? I'm not very clued up on wireless unfortunately.

I know that the wireless adapter will and can pick up DHCP info from the Windows Server, so that helps with that. What about the encryption though? Or would the initial log in details be in clear air until you've actually logged into Windows and set it?

Our school doesn't have wi-fi hotspots, and may not have until next year sometime. If we had, I could have tested this out lol.

Thanks everyone.

Once you have connected to the network(ie. get an IP address), you are essentially "plugged" in with a UTP cable. Encryption is handled by the access point in most setups(WEP/WPA etc.). There are lots of options out there to secure traffic between yourself and the access point, but generally the access point is plugged into your switch, WPA configured and that it.