Login 802.1x/radius cached credentials?

[Jaap Laaij]

Hi all,

Created VSC, authentication and access control, external radius (MS NPS) with connection to AD.

802.1X, MS-PEAP, MSCHAPv2.

Using a laptop, Windows XP pro SP3:

After a succesful local login on the laptop, using above VSC, the filled-in AD credentials apparently are cached.

You can reconnect to the same VSC without filling in any credentials after

- laptop in standby

- laptop restart

- having used another VSC

as the same user.

Is this by design?

Does this occur with any device you can this the VSC with?

The company wants to implement Bring your own device (BYOD).

Any more risks?