ACS 3.3 External DB account Restriction Windows Server 2003

[MIsatchenko]

Hi,

I am currently in the middle of installing CiscoSecure ACS 3.3.16 onto Windows Server 2003 for the first time.

I am getting the error External DB account Restriction each time a client tries to authenticate.....

Is there anything I should look out for with Windows Server 2003? Or can anyone explain why this is happening?

Thanks,

[ethiel]

There is a bug at the following link where that error is given for any number of issues. Can you give us more info about what you are using ACS for and how you have configured it?

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs33/rnwin333.htm

-Eric

[gaganbatra]

Hi,

ACS software needs some permissions to be granted to it on the windows machine it is installed.Do verify the following:

1.Acs is installed on the member server or DC and permissions are configured as per the following doc:

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs33/install/inst02.htm#wp981552

[bertccohen]

I ran into the same issue on Windows 2003. Make sure that in your local security policy, you set the "Local Policies\User Rights Assignment\Act as part of the operating system" with the same username that is running the ACS services. That fixed my problem. Hope this helps.