How to Install and Register a Network Policy Server
Applies to: Windows Server 2019, 2022 and 2025.
NPS provides RADIUS authentication, authorization and accounting for VPN, wireless and other network access servers.
Network changes can immediately interrupt management access. Maintain console access, export the current configuration and use approved test addresses. Visit networkmanager.info for managed Windows VPS services.
Prerequisites
- Join the NPS server to the domain.
- Define RADIUS clients and shared-secret handling.
- Use a dedicated service design and monitoring.
- Select certificate requirements for PEAP or EAP-TLS.
Procedure
Step 1: Install NPS
Add Network Policy and Access Services.
Install-WindowsFeature NPAS -IncludeManagementToolsStep 2: Register in Active Directory
Authorize NPS to read dial-in properties.
netsh nps add registeredserverStep 3: Open NPS console
Launch the management console.
nps.mscStep 4: Add RADIUS client
Enter the RRAS or access-device address and a unique protected shared secret.
Step 5: Create connection request and network policies
Order policies from specific to general and restrict groups, authentication and constraints.
Step 6: Enable accounting
Send logs to approved local or central storage.
Verification
Confirm role, IAS service and recent NPS events.
Get-WindowsFeature NPAS
Get-Service IAS
Get-WinEvent -LogName Security -MaxEvents 100 | Where Id -In 6272,6273Rollback
Disable or remove the new network policy and RADIUS client, then unregister the server only if no remaining service depends on it.
Security and operational notes
Never reuse one RADIUS shared secret across unrelated devices.
