Windows 2008 R2 GPO for wireless access restriction to Windows 8/8.1

Dear All
We have windows 2008 R2 as domain controller with windows 7/8/8.1 client.
we want to restrict wireless access by SSID and allow only company wireless.
is there any templates or gpo available?
Sunil
SUNIL PATEL SYSTEM ADMINISTRATOR

Dear SKPATEL,
Yep it is really possible, please follow these instructions:
Open Group Policy Management Console as an administrator.
In the navigation pane, open User Configuration\Administrative Templates\Network\Network Connections.
In the details pane, double-click one of the Group Policy settings described above.
Do one of the following:
To enforce the Group Policy setting on the currently logged on user, select
Enabled, click Apply, and then click OK.
To not enforce the Group Policy setting on the currently logged on user, select
Disabled, click Apply, and then click OK.
After you have modified all of the Group Policy settings you want, close Group Policy Management Console.
Enforce the changes you made and test.
More info, please check:
http://technet.microsoft.com/en-us/library/cc732613(v=ws.10).aspx
Best Regards,

Similar Messages

  • Windows 7 / 2008 R2 GPO for Screen timeout not working.

    What a joke. Why can't I get a simple screen saver to work VIA gpo with Windows 7 / 2008 R2? What is the fix?
    User Config\admin templates\control panel\Personalization---Enable Screen Saver - Enabled, Prevent Changing Screen Saver -Enabled, Password protect the the screen saver - Enabled, Screen Saver Timeout - Enabled.
    Number of seconds to wait to enabled scrren saver = 600 seconds.
    I have verified these settings via RSOP.msc and group policy modeling. What do I need to get this working!
    HELP WITH THIS SIMPLE TASK PLEASE!!!!!!!!!!!!!!!!!!!!

    Hi Dave Santel,
    Please run the following command on the problematic workstation.
    Gpresult /h > %temp%\gpresult.html  (“%temp%”
    is the path of the gpresult.html, you can set it yourself) 
    Please check this file gpresult.html which is used for checking the resultant of Group Policy information to see if the GPO has applied.
    Regards,
    Lany Zhang

  • Need a good NAS drive for wireless access to my multi-media

    I don't know if this is the right place to post this, but I have a large collection of music, video and photo files that I want to get off my laptop and onto a network drive that can be accessed wirelessly by other macs, and my xbox. Streaming ability and speed are the main priorities. Any help and suggestions for a good setup would be appreciated!
    My current network setup is as follows:
    • Airport Extreme Base station directly connected to a cable modem
    • Network extended by another AEBS w/ a network printer connected via USB
    • Network extended by an Airport Express w/ a Skype phone connected via ethernet

    Thanks, but it doesn't work. The device gets an IP just fine but it does not do any DHCP relaying. Even when I manually set my laptop to a LAN IP and connect it to a wired port it is unable to get to the internet. The documentation doesn't mention much about setting up a DHCP relay. Any additional help would be much appreciated.

  • Open Authentication for Wireless Access

    Hello,
    The standalone implementation of an existing wireless network is configured as Open Authentication with a TKIP Cipher. The client key management is set to WPA PSK.
    What exacly is the authentication for? I see that MAC and EAP are available options. Would these options be used to block or authorize the actual wireless devices that connect to the AP?
    The next thing I see is Client Authenticated Key management and I am using WPA PSK. What exactly happens once I enter thsi PSK from the client? Is it only used to encrypt the data?
    Thanks,
    Kevin

    Hi Kevin,
    Using WPA we can configure  either Enterprise or pre shared key.. Enterprise comprises of EAP and pre shared key is just the PSK..
    if we are using EAP then auth will be done by the RADIUS and the encryotion will still be TKIP.. now coming back to PSK, this is shared key which will authenticate the users locally...
    EAP is more secured auth compared to PSK..
    Now regarding the "auth open" line.. see there are 2 kinds of auth in 802.11.. here while using wireless we need to auth twice, dot11 authentication and followed by the psk or EAP auth.. the auth open statement will force us to get the dot11 auth successful and then we move towards needed auth like PSK or EAP.. and another is Shared auth is very similar to WEP using open auth!!
    in the nut shel we have 3 kinds of auth..
    1> open - Dot11 auth
    2> Shared - Nothing but WEP
    3> 802.1X suite - EAP
    again, the below link may give you some insights as well!!
    http://www.cisco.com/en/US/docs/wireless/access_point/12.2_13_JA/configuration/guide/s13auth.html#wp1035025
    Lemme know if this answered ur question and please dont forget to rate the usefull posts!!
    Regards
    Surendra

  • Trying to choose a method for wireless access (non-Safari question)

    This isn't a Safari question, but I think plenty of Safari users would hopefully know an answer to it....and I'm not sure where else to ask:
    I'd like to be able to access Wi-Fi when I'm travelling-- which isn't very often, so I'm not keen on spending $1000+ on a laptop if all I'm using it for is to surf the net and check email.
    I'm thinking a PSP or similar gaming device would be a solution.....and entertain me as well. What other non-laptop products would give me Wi-Fi access?
    Thanks for any help!
      Mac OS X (10.3.9)  

    I'm thinking a PSP or similar gaming device would be
    a solution.....and entertain me as well. What other
    non-laptop products would give me Wi-Fi access?
    You want a PDA or perhaps a cellphone. I don't see any Apple connection. You'd probably be better off searching Google.

  • Lost wireless access

    I have an unusual problem. Have new MBP and has been working on the wireless network fine till three days ago. I have a Linksys Router and two AP's with 4pc's (3 wireless 1 via jacks) 1 Imac, 2 laptops wireless and the new MBP.
    The MBP will get on my network but will not take a DHCP or function with a hard IP config. On the MBP, I have under network port configuration unchecked all but the wireless card and still no luck. I have remove and rebuilt the airport and still the same as above.
    The Linksys I have set max DHCP to 50. I have the wireless access restricted to MAC address only and no SID broadcast and WPA TKIP.
    Any ideas????????????

    I'm having the same problem too. Periodicaly the MBP connects to the router (or so it seems) but configures an arbitrary DCHP lease. I have a Netgear router where I have specified to the router to only assign two specific address to the two computer that are hooked, everytime. This problem existed even before I did this, which is what prompted me to do it in the first place.
    I think the problem is with the Airport extreme card on the MBP.
    As of right this second I'm not able to connect to the internet with my MBP, I'm on my Windows machine.

  • WRT310N Access Restriction tab

    I just recently updated the firmware in my router from 1.0.04 to the newest 1.0.07 build 14. I felt the need to update since my router would randomly stop broadcasting a wireless signal and after a few minutes come back. but that's not the issue, since the new firmware doesn't do this(yet, *crosses fingers*). 
    Since the update, I've noticed one thing. The "access restriction" feature on the router isn't there anymore. Live support says they've never seen that happen before, and directed me to the HDN stuff on the LELA software(After telling me to do the standard stuff for 5 minutes). I see the feature kind of available in there in a more "user-friendly" way. I don't understand how the feature could be missing on the main GUI but available through some software. I, personally cannot warrant paying for the HDN stuff just for the access restriction tab controls that were previously free and continue to be free on other routers, and most other people probably don't as well. But I'm interested in seeing if others have noticed this as well and what the general community thought is about this.
    Solved!
    Go to Solution.

    When you reset your router to factory defaults it goes back to the old firmware 1.0.04...With the old firmware if you don't have any issues then try to upgrade your router to the latest firmware...Wait another next firmware release...
    However, if you have any issues with the old firmware then you should try to upgrade your router with the TFTP Utility...
    Download TFTP Utility
    Download Firmware 3.23 MB...
    Double click the tftp.exe file and click run :
    For Server- Enter the IP Address of the router that you assigned.  By default, the router is 192.168.1.1...
    For Password- Enter the password you assigned the router. By default, the router’s password is “admin”.
    For File- Click the triple “…” button and browse for the .bin firmware file...
    Click Upgrade button to start upgrading.  A progress bar should show up to show the progress.
    Once the Upgrade is done press and hold the reset button for 30 seconds...Release the reset button...Unplug the power cable from your router, wait for 30 seconds and re-connect the power cable...Now re-configure your router...See if this works...

  • WRT300N Access Restrictions by Keyword

    Hello All! 
    I have just installed the WRT300N router to my desktop computer for wireless access for both of my son's laptop's and Xbox 360's.  I have searched all over this forum and have not been able to find the answer to the question I have, although, I have found many other useful posts. 
    My question is about the Access Restrictions by Keyword.  There are only 4 boxes for the keywords to be listed.  Can you enter as many keywords in the one box that you want.  Listing only 4 keywords will not do anything to block access to sites.  I had a NETGEAR that would allow you to enter as many keywords as you want, but it wouldn't let you set it up to block certain MAC addresses.
    Thanks in advance!

    That is true that only four boxes are provided for that purpose. But i think you should be able to give multiple keywords in a box. I have never tried it myself. Just give it a try and see if it works and also let us know about it.

  • Wireless Access Outside the US

    Hi. I am a US resident traveling to the UK with my PowerBook G4. It is equipped with an airport card for wireless access. Stupid question, but will I be able to connect wirelessly (i.e. with no special adapters, etc.) in any UK hotspot, just as I would in the US?
    Tiffany

    Doing the same with a MacBook, and also curious about any special network settings or anything I should be aware of in order to pick up internet access while in England.
    Still working out the details so I am not sure if wired access will be provided, or if I will need to look for a hotspot or two in the area.

  • In server 2008 r2 i cant prevent access to extra drive letters(apart from a,b,c,d) via gpo

    in server 2008 r2 i want to prevent access to extra drives like g,h,i,j drives via GPO i have been able to successfully hide these extra drives but not able to prevent access to restrict them  i have hidden these extra drive letters via code pasting
    with hidedrives.adm file on right clicking adminstrative templates in GPO and adding  templates but i dont know the code for preventing access to drives. HELP me need this fast 

    Hi Manish,
    Based on your description, we can try enabling the following policy:
    User Configuration\Administrative Templates\Windows Components\Windows Explorer\
    Prevent access to drives from My Computer
    If we enable this policy, users cannot view the contents of the selected drives in My Computer and Windows Explorer. Also, they cannot use the
    Run dialog box, the Map Network Drive dialog box, or the Dir command to view the directories on these drives.
    However, this policy does not prevent users from using programs to access local and network drives. And, it does not prevent them from using the Disk Management snap-in to
    view and change drive characteristics.
    Regarding this policy, the following article can be referred to for more information.
    Prevent access to drives from My Computer
    http://technet.microsoft.com/en-us/library/cc978514.aspx
    Best regards,
    Frank Shen

  • How to set-up Guest Client Wireless Access "PIN" with Restricted Access ???

    This is my first time, and, I am not familiar with the rules.
    Is it possible for someone to answer a slightly different question...
    I just bought a TC and hooked it up to my cable modem. I have 3 computers that I want to configure, with the following requirements: WPA/WPA2 security all around, only the 3 computers I have to be allowed use of the TC, and, no listing of the network should appear on remote computers (i.e., a "closed network"). With these basic needs, the three computers I want to be in this network are listed below --- subject to the following ACCESS limitations:
    1. A G4 iMAC (10.5.5), wired to the TC via an Ethernet cable: FULL ACCESS; i.e., shared file access, TM back-ups, HP printer access, internet access;
    2. A MacBook (10.5.5), airport wireless access to the TC: FULL ACCESS, as the iMAC.
    3. A (new generation) PC laptop: VERY LIMITED access --- access only to the internet, so that the TC looks only like a "wireless router." Internet access available at any time of the day or week. It would be good if this client did not have to use any of my passwords, just a "PIN." Also, I do NOT want this PC client to see my printer, and, also, to NOT see my TC base station and NOT have access to my TC/TM disks. To set this up, I entered the PC laptop name and the "MAC" address using the Airport Utility. Then, I selected the "PIN" choice for access, so that this client need not have to ever use or know of any of my passwords. After I selected the "PIN" option, the utility asked me to enter the PC client's PIN. How do I obtain the PC's PIN? This is very confusing to me, so, I apologize to you all (I'm very new at this).
    Hopefully, this TC-only network concern is within the guidelines to be answered.
    Thanks,
    David.

    Dear Smokerz,
    Well, this is where I'm confused. I did use the Airport Utility. I went to the place where it asks for the PIN number. So, I made up an 8-digit number and entered it. I assumed that after I entered the number, it would prompt me to do something with the PC. But, the "Continue" button did not become highlighted. Hence, my confusion. Can you please be more specific as to exactly what I should do using the Airport Utility? The detailed instructions are vague to me, unfortunately.
    Also, with respect to the PC Laptop: I only want it to have access to the internet via the TC (so that the TC acts as a wireless router). And, I want to set up restrictions for limited use of the PC: NO ACCESS to the HP printer, and NO ACCESS to the TM/TC (other than as a wireless router). As before, can you please be more specific as to exactly what I should do using the Airport Utility?
    I must be missing a trivial menu item, so, again, I apologize.
    Thank you,
    David.

  • Guest OS Windows 7 for remote access

    We are setting up 4 VM's with Windows 7 OS for staff access on a Dell PowerEdge R320.
    We had all of the VM's working as specified above but had to re-install Server 2012 Standard because the factory tech setup the Raid 5 to only give the server OS 40 GB of space.
    Installed Windows Server 2012 Standard with the following Roles and Features:
    File and Storage Services
    Hyper-V
    Network Policy and Access Services - Network Policy Server - Health Registration Authority
    Web Server (IIS) - Web Server (Defaults)
    Management Tools (Default)
    We will be joining this server to a Domain Controller on another server.
    This server will need to have mapped drives to a third party software database and storage file installed in it for business management.
    For setup purposes the NIC1 has been disabled to reserve it for iDRAC.
    The NIC2 is set to a static IP address for RDP and DOES have internet access.
    An External virtual switch has been installed in Hyper-V on the NIC2 named "Virtual Switch NIC 2" All of the guset VM's have the Virtual Switch "Virtual Switch NIC 2" installed (without VLAN ID and Bandwidth Management checked).
    The guest OS does show the network adpater as a device and is also set to a static IP for RDP. The networking and sharing window shows "No Internet Access" and cannot repair or resolve the issue. The Guest OS also does not see the Host files shared
    or the Host in Network. It displays as an unidentified network.
    Please advise and thank you in advance for your assistance.

    NIC 2 should not have anything on it except for Hyper-V Extensible Virtual Switch.  Anything else and you do not have a virtual switch on that NIC.  By default, when you create an External Virtual Switch, Hyper-V will automatically remove all the
    other protocols and settings and enable the Hyper-V Extensible Virtual Switch.  It looks like you went in and made manual changes which broke everything. 
    Delete your virtual switch and recreate it. When you recreate it, click the box to Allow management operating system to share this network adapter.  Then configure your IP information on the vEthernet that is created, not NIC2.  DO NOT MAKE ANY
    CHANGES TO THE PROPERTIES OF NIC2.
    "In the Hyper-V manager - Network Tab - it shows the IP address for the Guest OS as:
    169.254.181.237"
    I don't know what you are talking about here.  Hyper-V Manager does not have a 'Network Tab'.  Hyper-V does not perform any networking functions for the VMs.  You need to configure the network within the VMs themselves.  If you do not
    have DHCP configured for your environment (not a Hyper-V function), your VMs will come up with a 169.254.0.0/16 address.  That's an APIPA address and is a standard.
    One last thing, you might want to read this blog in order to better understand how networking works within Hyper-V -
    How
    does basic networking work in Hyper-V?  It's written for 2008, but it's a primer and it is still valid for 2012.
    . : | : . : | : . tim

  • I can't get my macbook to access shared files on a windows computer when it's connected through a wireless access point.

    I recently bought a Netgear Wireless Access Point to use in the office so we can have a wireless network.  I configured the wireless network, and I am currently connected to the internet.  However, I no longer can access the shared files on the Windows computers like I could when I was hardwired in with an ethernet cable.  I've disabled all of the internal firewalls on all of the computers (and there's no firewall built into the WAP), all the computers are on the same workgroup, and I've tried accessing the computer with the shared files directly via the IP address using the instructions found here http://docs.info.apple.com/article.html?path=Mac/10.5/en/8849.html. 
    My computer sees that the other computers on the network are there.  They show up in the network view from the finder.  However, when I try to connect to them, it tells me the connection failed.  When I click connect as, it says:
    "Connection Failed
    "The server “PC-ASSISTANT” may not exist or it is unavailable at this time. Check the server name or IP address, check your network connection, and then try again."
    When I try to connect via the "connect to server" on the finder, I type in "smb://10.0.0.103/Word Processing"  It tells me:
    "There was an error connecting to the server “10.0.0.103”. Check the server name or IP address, and then try again.
    If you are unable to resolve the problem contact your system administrator."
    I have no clue what the problem is. I'm not really an IT person or a networking guru.  Can someone please help?

    You posted in the Older Hardware forum, which is for pre-year 2000 hardware. Suggest you post your question in the Airport forum at https://discussions.apple.com/community/wireless/airport
     Cheers, Tom

  • Access Restrictions bug of firmware 1.01.1 for WRT54G V5 V6

    I am using WRT54G V5.
    The Access Restrictions function won't work properly when using firmwares 1.01.1 and 1.01.0. Ports can't be blocked by using the "Blocked Services" in this function.
    Now I have to switch back to 1.00.9 to make the port blocking work, but there is a DHCP server issue which could only be fixed in 1.01.0 or above.... Could someone fix this BIG BUG and roll out a new firmware????
    Thanks a bunch.
    Message Edited by Dennis_Hsu on 01-08-200705:02 PM

    What is your Fragmentation and RTS threshold value? I'm not sure if I'm reading your message right, but it says as far as I can understand 30. The value should be 2304 instead for both.
    Ty changing the wireless channel also to either 1, 6 or 11.

  • 1242AG Wireless Access Point - Cannot Get DHCP IP for BVI1 interface - Multiple SSIDs...

    Hello,
    I am attempting to set up three Cisco 1242AG Wireless Access Points with multiple SSID's. I used the web interface and directions online to set up the two networks I want and at least one of the networks work wirelessly.
    However, I have two problems:
    The first, which is the most important, is that the "management" interface, BVI1, doesn't get an ip address from our DHCP server. I set the VLAN 60 (which you'll see in the documenation below) to be the native VLAN on the device as well as on the switch that the device is connected to as well as other settings in the configeration file below. Because of this, I can only manage the device via the console port which would be a huge pain once all of the devices are mounted.
    The second problem is that I am not sure how to get both wireless networks broadcasting their SSID's. I have to manually type in the SSID for the second wireless network I have which I would prefer I don't have to. Anyway I can enable broadcasting on all of the SSID's?
    Thank you for your time.
    Regards,
    Christopher Koeber
    Using 7916 out of 32768 bytes
    version 12.4
    no service pad
    service timestamps debug datetime msec
    service timestamps log datetime msec
    service password-encryption
    hostname AP-18.wesleysem.edu
    enable secret {Number Here} {Encrypted Password Here}
    enable password {Number Here} {Encrypted Password Here}
    aaa new-model
    aaa session-id common
    dot11 syslog
    dot11 vlan-name Kresge vlan 20
    dot11 vlan-name Library vlan 30
    dot11 vlan-name Public vlan 60
    dot11 vlan-name Secure_Public vlan 70
    dot11 vlan-name Secure_Seminary vlan 80
    dot11 vlan-name Server_Room vlan 1
    dot11 vlan-name Straughn vlan 40
    dot11 vlan-name Trott vlan 10
    dot11 vlan-name Web_Room vlan 50
    dot11 ssid (Secure) Wesley Campus
    vlan 80
    authentication open
    authentication key-management wpa version 2
    wpa-psk ascii {Number Here} {WPA Key Here}
    dot11 ssid Public
    vlan 60
    authentication open
    mobility network-id 60
    username Cisco password {Number Here} {Encrypted Password Here}
    username admin privilege 15 secret {Number Here} {Encrypted Password Here}!
    bridge irb
    interface Dot11Radio0
    no ip address
    no ip route-cache
    encryption vlan 80 mode ciphers aes-ccm
    ssid (Secure) Campus
    ssid Public
    mbssid
    station-role root
    interface Dot11Radio0.1
    encapsulation dot1Q 1
    no ip route-cache
    bridge-group 254
    bridge-group 254 block-unknown-source
    no bridge-group 254 source-learning
    no bridge-group 254 unicast-flooding
    bridge-group 254 spanning-disabled
    interface Dot11Radio0.10
    encapsulation dot1Q 10
    no ip route-cache
    bridge-group 10
    bridge-group 10 subscriber-loop-control
    bridge-group 10 block-unknown-source
    no bridge-group 10 source-learning
    no bridge-group 10 unicast-flooding
    bridge-group 10 spanning-disabled
    interface Dot11Radio0.20
    encapsulation dot1Q 20
    no ip route-cache
    bridge-group 20
    bridge-group 20 subscriber-loop-control
    bridge-group 20 block-unknown-source
    no bridge-group 20 source-learning
    no bridge-group 20 unicast-flooding
    bridge-group 20 spanning-disabled
    interface Dot11Radio0.30
    encapsulation dot1Q 30
    no ip route-cache
    bridge-group 30
    bridge-group 30 subscriber-loop-control
    bridge-group 30 block-unknown-source
    no bridge-group 30 source-learning
    no bridge-group 30 unicast-flooding
    bridge-group 30 spanning-disabled
    interface Dot11Radio0.40
    encapsulation dot1Q 40
    no ip route-cache
    bridge-group 40
    bridge-group 40 subscriber-loop-control
    bridge-group 40 block-unknown-source
    no bridge-group 40 source-learning
    no bridge-group 40 unicast-flooding
    bridge-group 40 spanning-disabled
    interface Dot11Radio0.50
    encapsulation dot1Q 50
    no ip route-cache
    bridge-group 50
    bridge-group 50 subscriber-loop-control
    bridge-group 50 block-unknown-source
    no bridge-group 50 source-learning
    no bridge-group 50 unicast-flooding
    bridge-group 50 spanning-disabled
    interface Dot11Radio0.60
    encapsulation dot1Q 60 native
    no ip route-cache
    bridge-group 1
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface Dot11Radio0.70
    encapsulation dot1Q 70
    no ip route-cache
    bridge-group 70
    bridge-group 70 subscriber-loop-control
    bridge-group 70 block-unknown-source
    no bridge-group 70 source-learning
    no bridge-group 70 unicast-flooding
    bridge-group 70 spanning-disabled
    interface Dot11Radio0.80
    encapsulation dot1Q 80
    no ip route-cache
    bridge-group 80
    bridge-group 80 subscriber-loop-control
    bridge-group 80 block-unknown-source
    no bridge-group 80 source-learning
    no bridge-group 80 unicast-flooding
    bridge-group 80 spanning-disabled
    interface Dot11Radio1
    no ip address
    no ip route-cache
    shutdown
    encryption vlan 80 mode ciphers aes-ccm
    dfs band 3 block
    channel dfs
    station-role root
    interface Dot11Radio1.1
    encapsulation dot1Q 1
    no ip route-cache
    bridge-group 254
    bridge-group 254 block-unknown-source
    no bridge-group 254 source-learning
    no bridge-group 254 unicast-flooding
    bridge-group 254 spanning-disabled
    interface Dot11Radio1.10
    encapsulation dot1Q 10
    no ip route-cache
    bridge-group 10
    bridge-group 10 subscriber-loop-control
    bridge-group 10 block-unknown-source
    no bridge-group 10 source-learning
    no bridge-group 10 unicast-flooding
    bridge-group 10 spanning-disabled
    interface Dot11Radio1.20
    encapsulation dot1Q 20
    no ip route-cache
    bridge-group 20
    bridge-group 20 subscriber-loop-control
    bridge-group 20 block-unknown-source
    no bridge-group 20 source-learning
    no bridge-group 20 unicast-flooding
    bridge-group 20 spanning-disabled
    interface Dot11Radio1.30
    encapsulation dot1Q 30
    no ip route-cache
    bridge-group 30
    bridge-group 30 subscriber-loop-control
    bridge-group 30 block-unknown-source
    no bridge-group 30 source-learning
    no bridge-group 30 unicast-flooding
    bridge-group 30 spanning-disabled
    interface Dot11Radio1.40
    encapsulation dot1Q 40
    no ip route-cache
    bridge-group 40
    bridge-group 40 subscriber-loop-control
    bridge-group 40 block-unknown-source
    no bridge-group 40 source-learning
    no bridge-group 40 unicast-flooding
    bridge-group 40 spanning-disabled
    interface Dot11Radio1.50
    encapsulation dot1Q 50
    no ip route-cache
    bridge-group 50
    bridge-group 50 subscriber-loop-control
    bridge-group 50 block-unknown-source
    no bridge-group 50 source-learning
    no bridge-group 50 unicast-flooding
    bridge-group 50 spanning-disabled
    interface Dot11Radio1.60
    encapsulation dot1Q 60 native
    no ip route-cache
    bridge-group 1
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface Dot11Radio1.70
    encapsulation dot1Q 70
    no ip route-cache
    bridge-group 70
    bridge-group 70 subscriber-loop-control
    bridge-group 70 block-unknown-source
    no bridge-group 70 source-learning
    no bridge-group 70 unicast-flooding
    bridge-group 70 spanning-disabled
    interface Dot11Radio1.80
    encapsulation dot1Q 80
    no ip route-cache
    bridge-group 80
    bridge-group 80 subscriber-loop-control
    bridge-group 80 block-unknown-source
    no bridge-group 80 source-learning
    no bridge-group 80 unicast-flooding
    bridge-group 80 spanning-disabled
    interface FastEthernet0
    ip dhcp client update dns
    no ip address
    no ip route-cache
    duplex auto
    speed auto
    interface FastEthernet0.1
    encapsulation dot1Q 1
    no ip route-cache
    bridge-group 254
    no bridge-group 254 source-learning
    bridge-group 254 spanning-disabled
    interface FastEthernet0.10
    encapsulation dot1Q 10
    no ip route-cache
    bridge-group 10
    no bridge-group 10 source-learning
    bridge-group 10 spanning-disabled
    interface FastEthernet0.20
    encapsulation dot1Q 20
    no ip route-cache
    bridge-group 20
    no bridge-group 20 source-learning
    bridge-group 20 spanning-disabled
    interface FastEthernet0.30
    encapsulation dot1Q 30
    no ip route-cache
    bridge-group 30
    no bridge-group 30 source-learning
    bridge-group 30 spanning-disabled
    interface FastEthernet0.40
    encapsulation dot1Q 40
    no ip route-cache
    bridge-group 40
    no bridge-group 40 source-learning
    bridge-group 40 spanning-disabled
    interface FastEthernet0.50
    encapsulation dot1Q 50
    no ip route-cache
    bridge-group 50
    no bridge-group 50 source-learning
    bridge-group 50 spanning-disabled
    interface FastEthernet0.60
    encapsulation dot1Q 60 native
    no ip route-cache
    bridge-group 1
    no bridge-group 1 source-learning
    bridge-group 1 spanning-disabled
    interface FastEthernet0.70
    encapsulation dot1Q 70
    no ip route-cache
    bridge-group 70
    no bridge-group 70 source-learning
    bridge-group 70 spanning-disabled
    interface FastEthernet0.80
    encapsulation dot1Q 80
    no ip route-cache
    bridge-group 80
    no bridge-group 80 source-learning
    bridge-group 80 spanning-disabled
    interface BVI1
    ip address dhcp client-id FastEthernet0
    no ip route-cache
    ip http server
    no ip http secure-server
    ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
    bridge 1 route ip
    line con 0
    line vty 0 4
    end

    I am using a third party DHCP server which is our Windows Domain Controller. I have the ip helper-address set for the native vlan of the Access Point through a layer 3 distribution switch (a Catalyst 4506) that the current switch connects to.
    I didn't see any event on the logs for the AP.
    Let me know if I need to do something else.
    Thanks.

Maybe you are looking for