We are using the NAC as our Radius server. When a user lets their password expire, they are not able to change it over the wireless connection. They have to go to a wired connection and then they are able to change it.
Are others seeing this issue? How are you getting around this issue?
Thank you for your response.
So if I add a second SSID without authentication that uses just a passphrase, that should work?
Right now I only push out the 1 SSID via Group Policy.
My suggestion is to only allow that second SSID to have access to a DC (not your primary) and required services, as well as other remediation access (installing AV, pushing patches,etc). This helps provide a secure environment.
