SecurityRatty: Wired 802.1X and Windows XP SP3- Yes you can!

This is cache of http://www.securityuncorked.com/security-uncorked/2008/7/23/wired-8021x-and-windows-xp-sp3-yes-you-can.html. Cache is the snapshot of article that we took when we index feed.
To see original page click here.
We are not affiliated with the authors of this article and not responsible for its content.

Wired 802.1X and Windows XP SP3- Yes you can!

2008-07-23 13:59:30 by JJ in Security Uncorked

I’ve gotten a lot of questions recently about using 802.1X on the wired interface with Windows XP SP3. In the past few weeks I’ve also stumbled across a lot of forum posts, blogs and articles stating you ‘can’t do wired 802.1X with XP SP3.”

Well, sure you can! There is a little trick now, though.

As part of the move to the Microsoft NAP integration, they’ve broken out the wired and wireless supplicant management into two pieces. Until SP3, all 1X was handled in the Wireless Zero Configuration (WZCSVC) service. The wired 1X supplicant is handled now by a different service and must be manually started.

In Windows XP SP3, the supplicants are each handled separately by these services…
• Wireless 802.1X: WZCSVC service
• Wired 802.1X: Wired AutoConfig service (DOT3SVC)

How do you start the Wired AutoConfig service? Two ways, the end user (or admin) can do it manually on the endpoint, or you can push it out with group policies.

Instead of duplicating a lott’a text, you can find detailed instructions for manual and pushed wired 1X configurations on Microsoft KB article 953650.

You can also learn more about Microsoft NAP integration in the Network Access Protection Q&A site.

# # #