Deploying Secure 802.11 Wireless Networks with Microsoft Windows
Active Directory
When configuring Active Directory directory service for wireless access, use the following best practices:
If you have a native-mode domain and are using a group-based wireless remote access policy, use universal groups and global groups to organize your wireless accounts into a single group. Additionally, set the remote access permission on computer and user accounts to Control Access Through Remote Access Policy.
If you are using a Windows 2000 or Windows Server 2003 enterprise CA as an issuing CA, use the Computer Configuration Automatic Certificate Request Settings Group Policy setting to automatically issue computer certificates to all domain members.
Ensure that all appropriate domain system containers are configured for automatic enrollment of computer certificates, either through the inheriting of group policy settings of a parent system container or explicit configuration.
If you are using a Windows Server 2003, Enterprise Edition, or Windows Server 2003, Datacenter Edition, enterprise CA as an issuing CA, create a user certificate template and use the User Configuration Autoenrollment Settings Group Policy setting to automatically issue user certificates to all domain members.
Ensure that all appropriate domain system containers are configured for automatic enrollment of user certificates, either through the inheriting of group policy settings of a parent system container or explicit configuration.