NPS/RADIUS for VPN over Windows Server
Overview
Windows NPS still authenticates many legacy VPN concentrators—maintain health.
Checklist
Server certs valid; EAP types match clients; group conditions mapped to AD groups.
HA
Two NPS behind load balancer; shared secret rotation calendar.
Monitoring
Event log forward authentication failures spikes.
Migration path
Modern VPNs → Entra OAuth where feasible; sunset NPS intentionally.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...