Revision Summary Date Revision History Revision Class Comments 3/2/2007 1.0 New Version 1.0 release 4/3/2007 1.1 Minor Version 1.1 release 5/11/2007 1.2 Minor Version 1.2 release 6/1/2007 1.2.1 Editorial Changed language and formatting in the technical content. 8/10/2007 1.2.2 Editorial Changed language and formatting in the technical content. 9/28/2007 2.0 Major Converted to unified format. 10/23/2007 2.0.1 Editorial Changed language and formatting in the technical content. 1/25/2008 2.0.2 Editorial Changed language and formatting in the technical content. 3/14/2008 3.0 Major Updated and revised the technical content. 6/20/2008 4.0 Major Updated and revised the technical content. 7/25/2008 4.0.1 Editorial Changed language
technical content. 9/25/2009 9.1 Minor Clarified the meaning of the technical content. 11/6/2009 10.0 Major Updated and revised the technical content. 12/18/2009 10.0.1 Editorial Changed language and formatting in the technical content. 1/29/2010 11.0 Updated and revised the technical content. 3/12/2010 12.0 Major Updated and revised the technical content. 4/23/2010 13.0 Updated and revised the technical content. 6/4/2010 13.0.1 Editorial Changed language and formatting in the technical content. 7/16/2010 14.0 Major Updated and revised the technical content. 8/27/2010 15.0 Updated and revised the technical content.
the technical content. 3/30/2012 21.0 Major Updated and revised the technical content. 7/12/2012 21.0 None No changes to the meaning, language, or formatting of the technical content. 10/25/2012 21.0 None No changes to the meaning, language, or formatting of the technical content. 1/31/2013 21.0 None No changes to the meaning, language, or formatting of the technical content. 8/8/2013 22.0 Major Updated and revised the technical content. 11/14/2013 23.0 Major Updated and revised the technical content. 2/13/2014 23.0 None No changes to the meaning, language, or formatting of the technical content.
5/15/2014 23.0 None No changes to the meaning, language, or formatting of the technical content. 6/30/2015 24.0 Major Significantly changed the technical content. 10/16/2015 24.0 None No changes to the meaning, language, or formatting of the technical content. 7/14/2016 24.0 None No changes to the meaning, language, or formatting of the technical content. 6/1/2017 24.0 None No changes to the meaning, language, or formatting of the technical content. 9/15/2017 25.0 Major Significantly changed the technical content.
AnonymousIdentity: Contains a Unicode string specifying an alternate identity used in place of a user's true identity. It is sent in the EAP identity response message during the TTLS authentication. Anonymous identity usage is determined by the IdentityPrivacy element. Directory Service Schema Elements The Wireless/Wired Group Policy Protocol accesses the following schema classes and attributes listed in the following table. For the syntactic specifications of the following <Class> or <Class> <Attribute> pairs, refer to: Active Directory Domain Services (AD DS) and Active Directory Schema Classes . Class Attribute msieee80211-Policy cn description msieee80211-Data msieee80211-ID whenChanged cn description ms-net-ieee-80211-GP-PolicyData ms-net-ieee-80211-GP-PolicyGUID whenChanged ms-net-ieee-8023-GroupPolicy cn description ms-net-ieee-8023-GP-PolicyData ms-net-ieee-8023-GP-PolicyGUID whenChanged
00 00 00 00 PreAuthThrottlePresent: False 01 00 00 00 PreAuthMode: Ignored due to PreAuthModePresent 03 00 00 00 PreAuthThrottle: Ignored due to PreAuthThrottlePresent 00 00 00 00 PmkCacheModePresent: False 00 00 00 00 PmkCacheSizePresent: False 00 00 00 00 PmkCacheTTLSecPresent: False 02 00 00 00 PmkCacheMode: Ignored due to PmkCacheModePresent 64 00 00 00 PmkCacheSize: Ignored due to PmkCacheSizePresent D0 02 00 00 PmkCacheTTLSec: Ignored due to PmkCacheTTLSecPresent EAPTLS_CONN_PROPERTIES Streams The following table shows token streams relating to , the EAPData field for EAP-TLS. Token Stream Description 02 00 00 00 Version: 2 72 00 00 00 Size: 0x72 = 114 15 00 00 00 Flags: EapTlsRegistry: Local certificate EapTlsNoValidateServerCert: False EapTlsNoValidateName: True EapTlsDifferentUsername: EapTlsSimpleCertSel: True EapTlsDisablePromptValidation: False
02 00 00 00 8021xSupplicantMode: Send if needed 19 00 00 00 EAPType: PEAP 6E 00 00 00 EAPDataLen: 0x6E = 110 bytes 01 00 … 00 00 (110 bytes)EAPData: see section 01 00 00 00 Machine Authentication: Computer Credentials 01 00 00 00 Machine Authentication Type: User Reauthentication 00 00 00 00 Authentication: No 03 00 00 00 802.1XMaxStart 05 00 00 00 802.1XStartPeriod 12 00 00 00 802.1XAuthPeriod 01 00 00 00 802.1XHeldPeriod 25 00 00 00 DescriptionLen: 0x25 = 37 characters 53 00 61 00 6D 00 70 00 6C 00 65 00 20 00 44 00 65 00 73 00 63 00 72 00 69 00 70 00 74 00 69 00 6F 00 6E 00 20 00 66 00 6F 00 72 00 20 00 53 00 65 00 Description: "Sample Description for Second Profile"
63 00 6F 00 6E 00 64 00 20 00 50 00 72 00 6F 00 66 00 69 00 6C 00 65 00 00 00 00 00 PreferredSettingFlags: Broadcast 01 00 00 00 PreAuthModePresent: True 00 00 00 00 PreAuthThrottlePresent: False 01 00 00 00 PreAuthMode: 802.11i pre-authentication invoked 03 00 00 00 PreAuthThrottle: Ignored due to PreAuthThrottlePresent 01 00 00 00 PmkCacheModePresent: True 01 00 00 00 PmkCacheSizePresent: True 01 00 00 00 PmkCacheTTLSecPresent: True 02 00 00 00 PmkCacheMode: PMK caching invoked 80 00 00 00 PmkCacheSize: 0x80 = 128 entries C0 A8 00 00 PmkCacheTTLSec: 0xA8C0 = 43200 seconds = 12 hours PEAP_CONN_PROP Token Streams The following shows token streams relating to PEAP_CONN_PROP, the EAPData field for PEAP (). Token Stream Description 01 00 00 00 Version: 1 6E 00 00 00 Size: 0x6E = 110 bytes
Token Stream Description 54 00 68 00 69 00 72 00 64 00 50 00 72 00 6F 00 66 00 69 00 6C 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 SSID: "ThirdProfile" 0C 00 00 00 SSIDLength: 0x0C = 12 characters 03 00 00 00 802.11 Encryption - AES 02 00 00 00 ProfileIndex: 2 06 00 00 00 802.11 Authentication: WPA2-Personal 00 00 00 00 AutomaticKeyProvision: False 02 00 00 00 NetworkType - Infrastructure 00 00 00 00 Enable8021x - 01 00 00 00 8021xSupplicantMode: EAPOL-Start is not sent 0D 00 00 00 EAPType: EAP-TLS
<34> Section 3.2.3: The client-side plug-in does not support processing of XML-based wireless Group Policy on the following operating systems: Windows XP SP1, Windows XP SP2, Windows XP SP3, and Windows Server 2003. <35> Section 6.3.2: The Wireless LAN Profile v2 Schema is not implemented in Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 operating system.
68 69 68 66 64 63 69 62 61 Extensible Authentication Protocol (EAP) methods - configuration elements for 39 33 33 F 15 G 7 Group Policy Object 52 57 56 50 H Higher-layer triggered events administrative-side plug-in 49 49 50 50 59 I 73 73 11 Initialization 48 59 7 L Local events 58 60 M Message processing administrative-side plug-in 52 57 56 50 client-side plug-in 59 59 60 60 31 Messages 33 46 31 syntax 33 16 31 16 Microsoft EAP AKA schema 94 Microsoft EAP AKA' schema 95 88 Microsoft EAP PEAP schema 92 93 Microsoft EAP SIM schema 94 Microsoft EAP TLS schema 88 90 91 Microsoft EAP TTLS schema 96 N 10 O 11 P 73 35 38 37 14 14 101 19 R 9 11 10 13 S 46 Schemas 84 Active Directory 97 98
EAPHostConfig 87 87 86 86 Microsoft EAP AKA 94 Microsoft EAP AKA' 95 88 Microsoft EAP PEAP 92 93 Microsoft EAP SIM 94 Microsoft EAP TLS 88 90 91 Microsoft EAP TTLS 96 83 76 78 82 74 Security 73 73 Sequencing rules administrative-side plug-in 52 57 56 50 client-side plug-in 59 59 60 60 15 16 Syntax configuration elements for EAP methods 33 33 39 16 wired Group Policy 31 32 wireless Group Policy 16 27 T Timer events 58 60 Timers 48 59 105 16 Triggered events - higher-layer administrative-side plug-in 49 49 50 50 59 U 71 V 15 19 22 Versioning 15 14 W Group Policy 12 15 13 62 message syntax 31 32 60 15 83 76 Wireless Group Policy 12 BLOB example 69 66 64 63 68 69 68 66 64 63 69 14 13 message syntax 16 27 28 59 60 14 61 78 82 74 17 19 22