Cloudpath

PEAP MSCHAPV2 Configuration

Name:

Automatically use Windows logon

Description:

Controls the source of username and password information.

Notes:

If unchecked, the user name and password hash will be cached upon successful authentication to the registry key 'HKEY_CURRENT_USER\Software\Microsoft\Eapol\UserEapInfo'. Once cached, the user will not be prompted. See Microsoft's website for more information on removing the cached value.

If checked, be sure that the RADIUS server supports the incoming format of the user name. If the machine is not on a domain, it will come in formatted as '\\machine_name\user_name'.

Values:

Checked
The client will authenticate automatically using the Windows credentials. If credentials are incorrect, the user will not be prompted.
Unchecked
User will be prompted for user name and password.

Default Value:

Checked

Recommended Setting:

In most cases, this should be unchecked.

Cloudpath Help :

Cloudpath can detect the status of the 'Automatically Use Windows Logon' setting within the PEAP/MSCHAPv2 configuration.

Supported settings include:

Disabled - Default. When selected, the user will be prompted to specify their user name and password.

Enabled - When selected, the user's Windows logon name and password will be sent to the authentication server.

Cloudpath is able to auto remediate this setting.
By default, Windows XP will enable this for a new SSID.