Configuring Active Directory for Accounts and Groups for Wireless Access

Configuring Active Directory for Accounts and Groups for Wireless Access

To configure Active Directory user and computer accounts and groups for wireless access, do the following:

1. If you use Windows 2000 domain controllers, install Windows 2000 SP3 or later on all domain controllers.

2. Ensure that all users that are making wireless connections have a corresponding user account.

3. Ensure that all computers that are making wireless connections have a corresponding computer account.

4. Set the remote access permission on user and computer accounts to the appropriate setting: either Allow Access or Control Access Through Remote Access Policy. (The remote access permission setting is on the Dial-In tab in the properties dialog box of a user or computer account in the Active Directory Users And Computers snap-in.)

5. Organize your wireless access user and computer accounts into the appropriate groups. For a native-mode domain, you can use universal and nested global groups. For example, create a universal group named WirelessUsers that contains global groups of wireless user and computer accounts for intranet access.

   Use a native-mode domain and universal and global groups to organize your wireless accounts into a single nested group.