RE: Shared iPads

2017-04-18 Thread Jim Stasik 
We actually authenticate them with a certificate.  We push a configuration 
profile from our MDM solution (JAMF) and it gets a cert from our internal CA 
and configures the wireless to use it.  Works pretty well until the certificate 
expires.  Haven't figured out an automated way to manage that process yet.


Jim Stasik
Director of Enterprise Infrastructure Services
Montgomery County Community College
jsta...@mc3.edu
215.641.6678



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Eric Glinsky
Sent: Tuesday, April 18, 2017 10:08 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Shared iPads

For devices that aren't assigned to or owned by a specific person, we either 
log them in the 802.1x SSID with one AD account we use for all the oddballs, or 
put them on the PSK SSID.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Benedick, Jason
Sent: Monday, April 17, 2017 4:17 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Shared iPads

How do you deal with shared iPads for students authenticating to the WiFi 
network? We currently use an 802.1x enabled SSID using RADIUS back to our 
Microsoft NPS server.

My initial thought is to create an AD account for each iPad, but if we start 
getting a lot of them I can see that becoming very tedious managing usernames 
and passwords for each device.

Thanks,
Jason R. Benedick
IT Generalist
Thaddeus Stevens College of Technology
Office: (717) 391-6957 Cell: (717) 587-9065

*This electronic communication from TSCT is confidential and intended 
solely for use by the individual to whom it is addressed. If you are not the 
named recipient do not forward, propagate or replicate this e-mail. Please 
notify the sender immediately by e-mail if you have received this message by 
mistake and remove from your system. If you are not the intended recipient you 
are notified that disclosing, copying, distributing or taking any action 
dependent upon the contents of this email or attachment is strictly 
prohibited.*
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
This e-mail message is intended only for the person or entity to which it is 
addressed and may contain CONFIDENTIAL or PRIVILEGED material. Any unauthorized 
review, use, disclosure or distribution is prohibited. If you are not the 
intended recipient, please contact the sender and destroy all copies of the 
original message. If you are the intended recipient but do not wish to receive 
communications through this medium, please so advise the sender immediately. 
This e-mail message is intended only for the person or entity to which it is 
addressed and may contain CONFIDENTIAL or PRIVILEGED material. Any unauthorized 
review, use, disclosure or distribution is prohibited. If you are not the 
intended recipient, please contact the sender and destroy all copies of the 
original message. If you are the intended recipient but do not wish to receive 
communications through this medium, please so advise the sender immediately.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.



Montgomery County Community College is proud to be designated as an Achieving 
the Dream Leader College for its commitment to student access and success.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: Shared iPads

2017-04-18 Thread Eric Glinsky 
For devices that aren't assigned to or owned by a specific person, we either 
log them in the 802.1x SSID with one AD account we use for all the oddballs, or 
put them on the PSK SSID.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Benedick, Jason
Sent: Monday, April 17, 2017 4:17 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Shared iPads

How do you deal with shared iPads for students authenticating to the WiFi 
network? We currently use an 802.1x enabled SSID using RADIUS back to our 
Microsoft NPS server.

My initial thought is to create an AD account for each iPad, but if we start 
getting a lot of them I can see that becoming very tedious managing usernames 
and passwords for each device.

Thanks,
Jason R. Benedick
IT Generalist
Thaddeus Stevens College of Technology
Office: (717) 391-6957 Cell: (717) 587-9065

*This electronic communication from TSCT is confidential and intended 
solely for use by the individual to whom it is addressed. If you are not the 
named recipient do not forward, propagate or replicate this e-mail. Please 
notify the sender immediately by e-mail if you have received this message by 
mistake and remove from your system. If you are not the intended recipient you 
are notified that disclosing, copying, distributing or taking any action 
dependent upon the contents of this email or attachment is strictly 
prohibited.*
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
This e-mail message is intended only for the person or entity to which it is 
addressed and may contain CONFIDENTIAL or PRIVILEGED material. Any unauthorized 
review, use, disclosure or distribution is prohibited. If you are not the 
intended recipient, please contact the sender and destroy all copies of the 
original message. If you are the intended recipient but do not wish to receive 
communications through this medium, please so advise the sender immediately. 
This e-mail message is intended only for the person or entity to which it is 
addressed and may contain CONFIDENTIAL or PRIVILEGED material. Any unauthorized 
review, use, disclosure or distribution is prohibited. If you are not the 
intended recipient, please contact the sender and destroy all copies of the 
original message. If you are the intended recipient but do not wish to receive 
communications through this medium, please so advise the sender immediately.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: Shared iPads

2017-04-18 Thread Osborne, Bruce W (Network Operations) 
We currently use PEAP=MSCHAPv2.

For department-owned devices, we create a service account per department.
We also have iPads used in out elementary & high school. The students are 
divided into 3 groups based on academic grade. We have a service account per 
group and different web filtering policies for each of those groups.


Bruce Osborne
Senior Network Engineer
Network Operations - Wireless
 (434) 592-4229
LIBERTY UNIVERSITY
Training Champions for Christ since 1971

From: Benedick, Jason [mailto:bened...@stevenscollege.edu]
Sent: Monday, April 17, 2017 4:17 PM
Subject: Shared iPads

How do you deal with shared iPads for students authenticating to the WiFi 
network? We currently use an 802.1x enabled SSID using RADIUS back to our 
Microsoft NPS server.

My initial thought is to create an AD account for each iPad, but if we start 
getting a lot of them I can see that becoming very tedious managing usernames 
and passwords for each device.

Thanks,
Jason R. Benedick
IT Generalist
Thaddeus Stevens College of Technology
Office: (717) 391-6957 Cell: (717) 587-9065

*This electronic communication from TSCT is confidential and intended 
solely for use by the individual to whom it is addressed. If you are not the 
named recipient do not forward, propagate or replicate this e-mail. Please 
notify the sender immediately by e-mail if you have received this message by 
mistake and remove from your system. If you are not the intended recipient you 
are notified that disclosing, copying, distributing or taking any action 
dependent upon the contents of this email or attachment is strictly 
prohibited.*
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.