How to Configure Network Policy Server in Windows Server 2022

Posted on 20th June 2023

Overview

Network Policy Server (NPS) is a feature included in Windows Server that allows you to create and manage network access control policies. NPS can be used to authenticate and authorize remote users, as well as to enforce network access policies. In this article, we will show you how to configure NPS on a Windows Server 2022 machine.

Installing Network Policy Server

Before you can configure NPS, you will need to install it. NPS can be installed using the Server Manager tool.

To install NPS using the Server Manager:

1. Open the Server Manager and click on the “Manage” drop-down menu.
2. Select “Add Roles and Features”.
3. Click on “Next” until you reach the “Select server roles” page.
4. Check the “Network Policy and Access Services” box and click on “Next”.
5. Click on “Next” again until you reach the “Confirm installation selections” page.
6. Click on “Install”.

Configuring Network Policy Server

Once NPS is installed, you can begin configuring it. The first thing you will need to do is create a new network policy.

To create a new network policy:

1. Open the NPS console and expand the “Policies” node.
2. Right-click on the “Network Policies” node and select “New”.
3. Enter a name for the policy and click on “Next”.
4. On the “Conditions” page, select the conditions that will trigger this policy. For example, you can select the “User Groups” condition and specify which user groups this policy should apply to.
5. On the “Settings” page, select the settings that should be applied when this policy is triggered. For example, you can specify which users should be granted access and what type of access they should have.
6. Click on “Finish” to create the policy.

Testing the Network Policy Server

Once you have created a network policy, you can test it to make sure it is working as expected.

To test a network policy:

1. Open the NPS console and expand the “Policies” node.
2. Right-click on the policy you want to test and select “Simulate”.
3. On the “Simulation Type” page, select the type of simulation you want to perform. For example, you can select the “Authentication” simulation to test how the policy would handle an authentication request.
4. On the “User Groups” page, select the user groups that you want to include in the simulation.
5. On the “Settings” page, select the settings that you want to use for the simulation.
6. Click on “Run” to start the simulation.

Conclusion

In this article, we have shown you how to install and configure Network Policy Server on a Windows Server 2022 machine. We have also shown you how to create and test network policies.

Network Policy Server (NPS) allows you to create and enforce organization-wide network access policies. In this article, we will show you how to configure NPS in Windows Server 2022.

Before you begin, you will need to have the following:

A Windows Server 2022 machine

A static IP address

A domain name

Once you have all of the above, you can begin configuring NPS.

1. Open the Server Manager and click on “Add Roles and Features”.

2. Click Next until you reach the “Role” selection.

3. Select the “Network Policy and Access Services” role and click Next.

4. Click Next again and then click Install.

5. Once the installation is complete, open the “Network Policy Server” console.

6. In the left pane, expand “Policies” and then click on “Network Policies”.

7. In the right pane, right-click and select “New”.

8. Enter a name for the policy and click Next.

9. Select the “Machine Authentication” option and click Next.

10. Select the “EAP-MSCHAPv2” option and click Next.

11. Select the “Grant access” option and click Next.

12. Click Finish.

Your network policy is now created. The next step is to configure the NPS server.

1. In the “Network Policy Server” console, expand “Policies” and then click on “NPS (Local)”.

2. In the right pane, right-click and select “Edit”.

3. Select the “Authentication” tab.

4. Under “EAP Types”, click on the “Add” button.

5. Select the “PEAP” option and click OK.

6. Select the “PEAP” option and click the “Configure” button.

7. Select the “Enable Fast Reconnect” option and click OK.

8. Click OK again.

Your NPS server is now configured. You can now add clients and connect them to the server.

1. In the “Network Policy Server” console, expand “Policies” and then click on “NPS (Local)”.

2. In the right pane, right-click and select “Edit”.

3. Select the “Clients” tab.

4. Click on the “Add” button.

5. Enter the IP address of the client and click OK.

6. Click OK again.

Your client is now added. The next step is to configure the client.

1. On the client machine, open the “Network and Sharing Center”.

2. Click on “Change adapter settings”.

3. Right-click on the network adapter and select “Properties”.

4. Select the “Internet Protocol Version 4 (TCP/IPv4)” option and click the “Properties” button.

5. Select the “Obtain an IP address automatically” option and click OK.

6. Click OK again.

Your client is now configured. You can now connect to the NPS server.

If you want to configure Network Policy Server (NPS) in Windows Server 2022, you need to perform the following steps:

1. Install the Network Policy Server role service.

2. Configure NPS using the Getting Started Wizard.

3. Configure NPS policies.

4. Configure NPS accounting.

5. Configure NPS authentication.

6. Configure NPS authorization.

7. Configure NPS client settings.

8. Configure NPS Proxy settings.

9. Configure NPS logging.

10. Configure NPS alerts.

11. Configure NPS backups.

12. Configure NPS monitoring.

13. Configure NPS high availability.

14. Configure NPS troubleshooting.

In order to configure Network Policy Server in Windows Server 2022, open the NPS console and go to the “Policies” tab. Right-click on “Network Policies” and select “New.”

Enter a name and description for the policy, then click “Next.”

On the “Conditions” page, select the conditions that will trigger this policy. For example, you might want to trigger the policy only during certain hours or only when certain users are logged in.

On the “Settings” page, select the settings that you want to apply. For example, you might want to allow or deny access, or you might want to apply bandwidth restrictions.

On the “Authentication Methods” page, select the authentication methods that you want to use. For example, you might want to use EAP or PEAP.

On the “Constraints” page, select the constraints that you want to apply. For example, you might want to apply a time limit or a data limit.

On the “Network Policy Server” page, select the NPS that you want to use.

Click “Finish” to create the policy.