I've got a very interesting issue. I have ACS 3.2 configured with Windows Domain Database. The primary use is for Auth on Wireless with PEAP. I have one user account that was failing due to "External DB account Restriction" After hacking away at the issue I realized I was logging in with the username all lower case and within AD the username begam with a Capital letter. When logging in using the cap the auth was accepted. AD is not case sensitive, I have other users connecting showing the name with caps on the account. I cannot seem to replicate the issue with any other account and I cannot seem to fix it with this one.I also tried from multiple workstations. Any Ideas?
** Note - tested Auth to a MS IAS box with the user account and did not experience the problem.