Connecting Personal Windows Devices to the Wired Network
Modified on: Fri, Apr 26 2024 9:45 AMIn order for your personal device to operate and authenticate on the Marquette Wired Network you will need to ensure 3 things are set up: Wired AutoConfig Service, Credential Guard, and Ethernet Adapter Settings.
Wired AutoConfig Service
On Windows 10/11 – Enable Wired AutoConfig (On Win11 Wired AutoConfig might be enabled by default)
To check: Click Start -> Type “Services” -> Open “Services” App as shown below
Find the Wired AutoConfig Service in the window as shown below, you may need to sort by name by clicking on the "name" filed to find it
If it does not say "running" as shown above, double click on it and click "Start"
If you had to start the service, while the window is open, make sure to set "Startup Type: Automatic" as shown below
Click OK and close Services
Determine if Credential Guard is Running
You can use System Information to determine whether Credential Guard is running on a device.
Select Start, type msinfo32.exe, and then select System Information or hit Enter on your keyboard
Select System Summary (which should be selected by default)
-
Confirm if Credential Guard is shown next to Virtualization-based Security Services Running
If it says "Not enabled" next to Viturtualization-based Security you are good to go
Disable Credential Guard (if enabled)
https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/configure?tabs=reg#disable-credential-guard
Disable Credential Guard with registry settings
If Credential Guard is enabled without UEFI Lock and without Group Policy, it's sufficient to edit the registry keys to disable it.
Setting |
Key path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa |
Key path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard |
Ethernet Adapter Settings
Click Start -> Type “Ethernet”
Click Change adapter options
From the wired ethernet adapter
Right click -> Properties
Authentication Tab (if no Authentication tab, Start the WiredAutoConfig service)
Verify these settings:
Click on Settings Button:
Uncheck “Verify the server’s identity by validating the certificate”
Select Authentication Method = “Secured password (EAP-MSCHAP v2)”
Click Configure... button
Uncheck “Automatically use my Windows logon name and password (and domain if any).”
Click OK
Click OK
From Authentication Tab of Ethernet Properties, click “Additional Settings...” button
Verify “Specify authentication mode” is checked and drop down option is set to “User or computer authentication”
Click OK
Click OK
Your computer will attempt to authenticate. Sign in with your Marquette username — not your email address — and password.
Attempting to authenticate
Successful
Unsuccessful