Configure Radius Windows Server 2019

Network security is a critical concern for any organisation, as protecting resources and information is essential in today's digital world. One of the most effective ways to increase security on a network is to implement two-factor authentication, and one powerful tool to achieve this is a RADIUS (Remote Authentication Dial-In User Service) server. In this article, I'll walk you through the steps to configure a RADIUS in Windows Server 2019, allowing you to strengthen user authentication on your network.

If you don't yet have a legal license for Windows Server 2019, you can find one at a good price and of European origin in our online shop.

What is a RADIUS server?

RADIUS is a network protocol that provides authentication, authorisation and accounting services for users and devices attempting to connect to and use resources on a network. It is widely used in enterprise environments to ensure that only authorised users have access to the network. A RADIUS server acts as an intermediary between devices requesting access and authentication systems, such as Active Directory in the case of Windows Server.

Prerequisites

Before you start with the configuration, make sure you meet the following prerequisites:

  • Windows Server 2019 installed. You must have Windows Server 2019 installed and configured on your network.

  • Active Directory service. A RADIUS server often integrates with Active Directory for user authentication. Make sure you have a domain controller configured.

  • Administrative access. You must have administrator privileges on the Windows Server 2019 server.

Remote Authentication Dial-In User ServiceRemote Authentication Dial-In User Service

Steps to configure a RADIUS server in Windows Server 2019

Step 1: Install RADIUS Service

  1. Open the "Server Manager" in Windows Server 2019.

  2. Click "Manage" in the top right corner and select "Add roles and features".

  3. Follow the wizard to install the RADIUS service (also known as Network Access Authentication Service) and its features.

Step 2: Configure RADIUS

  1. Once the installation is complete, open "Remote Administration Tools Manager" from the "Administrative Tools" menu.

  2. In the "Remote Administration Tools Manager", expand "Server Tools" and select "Network Access and Policies".

  3. Right-click on "RADIUS Servers" and select "New RADIUS Server".

  4. Follow the wizard to configure the RADIUS server details, including the Active Directory server for authentication.

Step 3: Configure RADIUS clients

  1. In the "Remote Administration Tools Manager", expand "Server Tools" and select "Network Access and Policies".

  2. Click "RADIUS Clients" and then click "New RADIUS Client".

  3. Provide the client information, which includes the name and IP address of the device that will act as the RADIUS client.

Step 4: Configure network policies

  1. In the "Remote Administration Tools Manager", expand "Server Tools" and select "Network Access and Policies".

  2. Configure network access policies that will determine who has access and what resources authenticated users can use.

Step 5: Test the configuration

Once you have configured the RADIUS server, it is important to test it to make sure it is working properly. You can do this by trying to authenticate a device or user through the configured RADIUS server.

Conclusion

Configuring a RADIUS server in Windows Server 2019 can be a critical step in improving the security of your network. It provides an additional layer of authentication and access control that can effectively protect your resources and data. Be sure to follow the steps above and test the configuration to ensure proper operation. With a properly configured RADIUS server, you'll be on your way to a safer and more secure network.