User can't authenticate...auth-failed/windows workstation not allowed

Unanswered Question
Jan 31st, 2007

Keep on running into an odd problem. I have some users logging in via soft vpn connection. Yesterday, they were able to log in without a problem. Today they are getting 01/31/2007 08:09:21

Authen failed

Windows workstation not allowed .. ..

Why can they authenticate 1 day and then be denied. This happened last week as well. The server adminstrator seemed to think it was a user setup issue and gave them another user account. Now as you can see above, the same thing has happened. I don't get it. Any help would be appreciated.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (1 ratings)
beth-martin Tue, 02/06/2007 - 07:14

If you are using an ACS server for authentication, you will get the same error, Bad username or password on the Cisco Secure ACS for Windows RADIUS server. check the right username and password.

Scott Payne Tue, 02/06/2007 - 07:27


Thanks. After working with these people overseas, it seems that they were fat fingering everything. Don't know why. Don't care.



amrkrish Wed, 02/07/2007 - 11:16

For ACS to perform Windows authentications we need to specifiy a workstation name.

In AD , the user should have access to all computers.


A computer account named CISCO should exist.

All users that Windows will authenticate have permission to log in to the computer named CISCO.

ACS shows this error message only when the user tries to login from a work station he has no permission to log on.

If you are using ACS 4.1 this link will be useul.


This Discussion