Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

How do you selectively disable users validated by nt domain?

We are validating our sw vpn users on our 3030 via nt domain. Therefore there are no individual userids.

How can we selectively disable certain users? e.g. A few office workers not allowed to come in from home.

If this were Windows / RAS we could uncheck the dialin box on their user profile - is there some similar setting within Windows for sw VPN users?

Or even better, are these domain authenticated users authenticated against any particular nt group, from which we could then remove them?

2 REPLIES
Bronze

Re: How do you selectively disable users validated by nt domain?

With NT Domain Authentication, what you are trying is not possible. What you need to do is to configure the concentrator to use Radius. You could refer to http://www.cisco.com/warp/public/471/cisco_vpn_msradius.html and http://www.cisco.com/warp/public/471/vpn3k_ias.html for more configuration information.

New Member

Re: How do you selectively disable users validated by nt domain?

Thanks kindly for your note. I'll have to check into this further.

If you are able to, this issue should be submitted as a bug / feature enhancement.

If you can query nt for whether or not they're a valid user, you should also be able to query whether or not they are members of the defined group. e.g. admins vs. guests.

121
Views
0
Helpful
2
Replies