Forum

Hey Diane. I don't want you to misunderstand my comments. It doesn't (really) matter how often you change passwords if you use WEP or WPA, because it isn't secure enough to provide protection against an attacker, as they can break the new password in a short period of time anyway. WEP or WPA protects you against the casual non-authorized user. To get real protection, you need to use WPA- or WPA2-enterprise.

Windows 200x Server has a built-in RADIUS server that can be used with 802.1X (using EAP-PEAP or EAP-TLS) which is part of WPAWPA2 Enterprise. Your wireless clients (supplicants) and access points (authenticators) will also need to support WPAWPA2 which anything current will do. You'll need to configure it all before feeling too secure!

As for the guest account, I would only provide access to resources that didn't require securing, so I would not implement a password rotation policy for that account. Other may have a different opinion. Hope this helps.