GPO settings for EAP-TEAP missing in Windows 2016 and Windows 2012 R2

Question

question

GiovanniAugusto-1899 asked · Dec 20, 2020 at 01:58 AM

GPO settings for EAP-TEAP missing in Windows 2016 and Windows 2012 R2

Hi Everyone,

I have two Windows servers (2012 R2 and 2016) and even if I have downloaded and applied the latest Windows 10 2004 ADMX I cannot find any settings for the GP Manager for Wireless EAP-TEAP settings to distribute to the workstations.

Ho can I make them available in a GPO without a workaround?

Thanks!

windows-server-2016 windows-group-policy windows-server-2012 windows-10-network

· 4

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SunnyQi-MSFT · Dec 21, 2020 at 04:00 AM

Thank you for your question. I am trying to involve someone familiar with this topic to further look at this issue. There might be some time delay. Appreciate your patience.
Thank you for your understanding and support.

0 ·

SunnyQi-MSFT · Dec 24, 2020 at 05:46 AM

Hi,

Just checking in to see if the information provided was helpful.

If yes, you may accept useful reply as answer, if not, welcome to feedback.

Best Regards,
Sunny

0 ·

GiovanniAugusto-1899 SunnyQi-MSFT · Dec 24, 2020 at 09:11 AM

Hi Sunny,

Thanks for your reply but it doesn't really answer my question in depth, that is indeed IF I can create and apply settings via GPO objects but really if there is any plan to have such settings available or what is the official method from Microsoft to enforce these settings for Workstations.

Windows 10 build 2004 came out in June I believe and I am surprised if there wouldn't be any option available via GP manager to enforce them.

So to recap

is there a way to configure these settings via GP manager?
if #1 is a no, what is the official method to centrally enforce these settings?
Is GP manager a tool that is going to be discarded and deprecated in Microsoft Windows management?

Thanks!

0 ·

GiovanniAugusto-1899 · Jan 04 at 08:27 AM

Happy new year,

I hope someone has an answer on how to configure GPO settings for TEAP

0 ·

Answer 1 · 2020-12-22T08:49:53.897Z

SunnyQi-MSFT answered · Dec 22, 2020 at 08:49 AM

Hi，

Thanks for posting in Q&A platform.

I checked the GP in windows server 2016 and 2012 in my lab and found that there is also no related settings under Wireless Network. I'm afraid that your goal cannot be achieved in a GPO.

As for ADMX, it’s applied for Administrative Templates and not related Windows Settings GP.

Best Regards,
Sunny

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

image-3.png (21.3 KiB)

image-1.jpg (146.9 KiB)

image-2.png (66.1 KiB)

· 1 ·

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

GiovanniAugusto-1899 · Mar 01 at 06:26 PM

Hi,

I waited for a while to check if anyone would come up with an answer, do you think this will ever be officially a configurable option via GPO?

0 ·

Answer 2 · 2021-03-04T05:39:15.957Z

heyneke answered · Mar 04 at 05:39 AM

Found these, same issue with one of my customers:
https://docs.microsoft.com/en-us/answers/questions/120377/windows-10-alwayson-vpn-with-eap-teap.html

Cisco published a workaround which I haven't tested
https://community.cisco.com/t5/security-documents/teap-for-windows-10-using-group-policy-and-ise-teap/ta-p/4134289

· 1 ·

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

GiovanniAugusto-1899 · Mar 04 at 11:29 AM

Thank you,

I was looking at those and perhaps these can work, even if no one knows what effect it can have in production on the long run.

I would like to just to understand if the message is that GPO is no longer supported for new Windows features and if not what is the alternative of choice for Microsoft (this would be a big blow I guess)

0 ·

question