Group NT authenticated users

[wei.hu]

Hi,

When the vpn users are authenticated with NT accounts, they will be put into the default group by default.

Is there a way to change the default behavior?

Thanks,

Wei

[gfullage]

Are you talkng about the VPN3000 default group, or the ACS server default group?

If the VPN3000, they'll be put into whatever group they have configured in the VPN client.

If the ACS, the you can set up Database Group mappings under the External User Database section and map users into a specific ACS group dependent on what Windows NT groups they're members of.

[wei.hu]

It is about VPN3000 default group. The VPN Client is Microsoft VPN client.

The Client is also authenticated with certificate. I can see during the group authenticate (using "ou"), the client is put into correct group. But for the user authentication, it changes to use the default group again.

Regards,

Wei

[Blixten]

Hi!

From what I know the Windows VPN client does not support Cisco groups which is why all users connecting thru it will end up in the VPN3000 Base Group.

Regards