Additionally, as your AD credentials will be encrypted you cannot use CHAP authentication. Simple authentication mechanisms have the following requirements for RADIUS credentials: PAP - plaintext or encrypted CHAP - plaintext MSCHAPv2 - plaintext or MSCHAPv2 Also, don't use PPTP for VPNs as it is v...

Okey, problem is solved. It was my bad, because in Mikrotik RADIUS config there's field DOMAIN and I put there FQDN. I didn't know that this field is used by Mikrotik to forward auth to proper RADIUS server eg. when I log in as YYY\user, Mikrotik watches if there's RADIUS for domain YYY, and then pa...

Hello there, I've got Active Directory with some users, and now I'm going to give them possibility of working remotely on domain. I've got PPTP VPN server on Mikrotik Routerboard. The answer for automatic authentication using AD credentials is NPS server. I've done everything as in this tutorial: ht...