Can Mikrotik know the users through Active Directiry?

RouterOS General
1

Hi all,
How can Mikrotik be integrated in the domain (Active directory) which allow logged in users through their stations to connect to net without needing a dual authentication using the hotspot?!
I mean I want the users which has logged in to the computer using their domain username to be known with that and be permitted to use the net & other users which has used their local computer’s account to login to the computer be denied from network access.

I think such a thing is done in ISA. So, it should be available in this too.

Thanks

2

i use mikrotik as a pptp vpn server and as wireless acces points.

al authenticate to active directory using radius.

i havent been able to push dhcp settings through radius, but that’s the only thing i tried and didnt work.

3

Thanks for your reply. But, reading the documentations, I reached the term “bypassing hotspot login page”.
In fact, I like to the authenticated users who has logged in to their system using their domain username, won’t see the Login page for internet access & they would surf net without any problem.
However, the others would see the login page.

4

im my setups i dont use a hotspot, for my users, only for guests.
i have one virtual interface for main users access; wpa2 entr.

i have another virtual interface for a hotspot setup, guests comming into the company. the hotspot is limmited as bandwidth and session time.

i since switched to some other devices, but it worked ok.

5

As you told, I wanna let the company users which are joined to a domain to use internet without any problem. However, the guests should not be allowed to use it.
One of my friends has done such a thing using “Kerberos authentication (for Active Directory users)” in Kerio. So, the logged in users which has logged in computers using their domain username won’t have any prblem browsing the net while the others does!
This image shows such a option in Kerio:




Can’t I do such a thing in Mikrotik?