Active Directory and the IllinoisNet Secure Wireless Network
If your Windows computer is a part of the campus Active Directory network and you always log in to it as a member of the campus domain, you can configure IllinoisNet to take your user name and Active Directory password directly from the computer.
This configuration is particularly useful for lab laptop computers that are members of the campus Active Directory.
Requirements
- A Windows XP, Vista, 7, or 8 system
- When you log in to the computer itself, you must log in through the UIUC Active Directory domain:
What won't work
You won't be able to use this configuration option...
- If your computer is not a Windows XP, Vista, 7, or 8 system
- If you log in to a departmental Active Directory domain (any domain other than UIUC)
- If you've logged in to the computer as a "local workstation" rather than as part of the UIUC domain
In addition, using UIUCnet QuickConnect or the CITES VPN will not substitute for logging your computer into the Active Directory domain. You can use those services in addition to Active Directory membership, but not instead of it.
If you're not certain whether or not you use the campus Active Directory to log in, don't use this configuration change. Use the regular Windows XP, Windows Vista, or Windows 7 or 8 configuration instead.
Configuration change for AD use
If you're certain that your computer will always be logged in to the UIUC Active Directory domain when you're using the IllinoisNet wireless network, you can modify your configuration as follows.
1. Follow the usual Windows configuration steps until you reach the window labeled EAP MSCHAPv2 Properties.
In the default configuration, this window's option will not be checked.
2. Check the "Automatically use my Windows logon name and password (and domain if any)" option to use your campus AD credentials whenever you connect to the IllinoisNet wireless network.
Finish the rest of the configuration for your platform as usual.
After you've completed the configuration, you may need to modify one additional setting in the Wireless Network Properties menu of your IllinoisNet configuration. The options listed below are the default options for Vista Enterprise and Windows 7 or 8 Enterprise, but may not be the default for XP users.
Tip: If you encounter Active Directory connection difficulties, check the configuration steps below to make certain that the computer authentication option is checked.
Windows XP configuration steps
1. Right click on your wireless icon and select View Available Wireless Networks.
2. Click the Change Advanced Settings link in the left column.
3. Click the Wireless Networks tab.
4. Select IllinoisNet from the list of preferred networks and click the Properties button.
5. In the IllinoisNet Properties window, select the Authentication tab.
6. Check the Authenticate as computer when computer information is available checkbox.
7. Click OK until you've returned to the desktop.
Windows Vista Enterprise configuration steps
Note: The configuration options listed below are not available in the Windows Vista Home edition.
1. Click on your wireless icon and choose the Open Network and Sharing Center option.
2. In the Network and Sharing Center, click on the Manage Wireless Networks item in the left column.
3. Right click on the IllinoisNet entry and choose Properties.
4. Under the Security tab, click the Advanced Settings button.
5. Under the 802.1x Settings tab, make sure that:
- Specify authentication mode is checked.
- User or computer authentication is the option selected in the drop menu.
Windows 7 or 8 configuration steps
Note: The configuration options listed below are not available in the Windows 7 Home edition.
1. Click on your wireless icon and choose the Open Network and Sharing Center option.
2. In the Network and Sharing Center, click on the Manage Wireless Networks item in the left column.
3. Right click on the IllinoisNet entry and choose Properties.
4. Under the Security tab, click the Advanced Settings button.
5. Under the 802.1x Settings tab, make sure that:
- Specify authentication mode is checked.
- User or computer authentication is the option selected in the drop menu.