Register an NPS in an Active Directory Domain

You can use this topic to register a server running Network Policy Server in Windows Server 2016 in the NPS default ___domain or in another ___domain.

Register an NPS in its Default Domain

You can use this procedure to register an NPS in the ___domain where the server is a ___domain member.

NPSs must be registered in Active Directory so that they have permission to read the dial-in properties of user accounts during the authorization process. Registering an NPS adds the server to the RAS and IAS Servers group in Active Directory.

Membership in Administrators, or equivalent, is the minimum required to perform these procedures.

To register an NPS in its default ___domain

1. On the NPS, in Server Manager, click Tools, and then click Network Policy Server. The Network Policy Server console opens.

2. Right-click NPS (Local), and then click Register Server in Active Directory. The Network Policy Server dialog box opens.

3. In Network Policy Server, click OK, and then click OK again.

Register an NPS in Another Domain

To provide an NPS with permission to read the dial-in properties of user accounts in Active Directory, the NPS must be registered in the ___domain where the accounts reside.

You can use this procedure to register an NPS in a ___domain where the NPS is not a ___domain member.

Membership in Administrators, or equivalent, is the minimum required to perform these procedures.

To register an NPS in another ___domain

1. On the ___domain controller, in Server Manager, click Tools, and then click Active Directory Users and Computers. The Active Directory Users and Computers console opens.

2. In the console tree, navigate to the ___domain where you want the NPS to read user account information, and then click the Users folder.

3. In the details pane, right-click RAS and IAS Servers, and then click Properties. The RAS and IAS Servers Properties dialog box opens.

4. In the RAS and IAS Servers Properties dialog box, click the Members tab, add each of the NPSs that you want to register in the ___domain, and then click OK.

To register an NPS in another ___domain by using Netsh commands for NPS

1. Open Command Prompt or windows PowerShell.

2. Type the following at the command prompt: netsh nps add registeredserver  ___domain  server, and then press ENTER.