How to Set Up Active Directory for Managing Wi-Fi on Computers
Managing Wi-Fi access across multiple computers can be a challenge, especially in business or educational environments. Using Active Directory (AD) makes it easier by allowing centralized control over network policies, user authentication, and device access. Here’s a step-by-step guide:
1. Set Up Active Directory
-
Install Windows Server on your domain controller.
-
Add the Active Directory Domain Services (AD DS) role via Server Manager.
-
Promote the server to a Domain Controller and create your domain (e.g.,
company.local).
2. Create Organizational Units (OUs)
-
In Active Directory Users and Computers, create OUs for different groups of users or devices (e.g.,
Staff,Students,Guest Devices). -
This helps apply Wi-Fi policies selectively.
3. Join Computers to the Domain
-
On each computer, go to Settings → System → About → Join a domain.
-
Enter your domain name and credentials of an account with permission to join devices.
-
Restart the computer to complete the domain join.
4. Configure Group Policy for Wi-Fi
-
Open the Group Policy Management Console (GPMC) on your server.
-
Create a new GPO (Group Policy Object) linked to the OU containing your computers.
-
Navigate to:
Computer Configuration → Policies → Windows Settings → Security Settings → Wireless Network (IEEE 802.11) Policies -
Create a new wireless policy, set the network name (SSID), security type (WPA2/WPA3 Enterprise), and configure authentication to use Active Directory credentials.
5. Deploy the Wi-Fi Policy
-
Once the policy is configured, it will automatically push to all computers in the OU when they next refresh group policies (
gpupdate /force). -
Users will then be able to connect to Wi-Fi using their domain credentials.
6. Optional: Set Up NPS for 802.1X Authentication
-
Install the Network Policy Server (NPS) role on your server.
-
Configure RADIUS authentication so that devices connecting to Wi-Fi are authenticated against Active Directory.
-
This enhances security by requiring domain credentials for network access.
