frequent password changes are locking users out of WiFi

  • 1
  • Question
  • Updated 1 year ago
Hi guys,

I would like to know any information on whats best practice when users require to change their AD password frequently?

Currently, we have a 2 SSID's, one for guest and the other for internal users. The internal users use computer authentication to connect and potentially use domain username/password as well. The problem is that since we've implemented a 90 day password expiration in AD, they have been getting locked out every time there password has expired. I've suggested to use our guest SSID but they do not want to register every time they come in the building. Is there any best practices in order to get around the password expiration?  The ultimate goal is to get clients to connect to a guest network with their personal devices but not have them to re-authenticate every day.
Photo of Arison Mercado

Arison Mercado

  • 113 Posts
  • 8 Reply Likes

Posted 1 year ago

  • 1
Photo of Crowdie

Crowdie, Champ

  • 972 Posts
  • 272 Reply Likes
Do you just want the domain computers to securely connect to the domain or are you utilising user authentication to classify the users post authentication?

I am assuming you are using PEAP MSCHAPv2 for the EAP type.
(Edited)