02-10-2003 07:10 PM - edited 02-21-2020 10:05 AM
Hi,
When the vpn users are authenticated with NT accounts, they will be put into the default group by default.
Is there a way to change the default behavior?
Thanks,
Wei
02-10-2003 08:01 PM
Are you talkng about the VPN3000 default group, or the ACS server default group?
If the VPN3000, they'll be put into whatever group they have configured in the VPN client.
If the ACS, the you can set up Database Group mappings under the External User Database section and map users into a specific ACS group dependent on what Windows NT groups they're members of.
02-11-2003 02:36 PM
It is about VPN3000 default group. The VPN Client is Microsoft VPN client.
The Client is also authenticated with certificate. I can see during the group authenticate (using "ou"), the client is put into correct group. But for the user authentication, it changes to use the default group again.
Regards,
Wei
03-21-2003 07:21 AM
Hi!
From what I know the Windows VPN client does not support Cisco groups which is why all users connecting thru it will end up in the VPN3000 Base Group.
Regards
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide