How To Login Offsite With Active Directory

Dec 12, 2011

I've got this problem with our Operations Manager's laptop not letting him log in once he is offsite(at home). We use an Active Directory server here for all out workstations to log on to the domain but once he is offsite he cannot log in because the laptop obviously cannot find the sever to authorize the user. For now I just have him logging in locally to his laptop and not to the domain when he is offsite but this creates a problem; it makes two users/desktops for him, one user.domain and user.local. Is there a way to tell the machine locally that his username is authorized to let him log onto the domain account though it cannot connect to the domain server?

View 3 Replies


ADVERTISEMENT

Cisco :: Using Active Directory To Login To Extension Mobility?

Jun 30, 2011

I have been rolling out new IP Phones that use extension mobility and the biggest issue Im finding is the need to log-in every day, People t like change and they hate the fact that they have to login every day.I have been to the people at the top and gave them the options of remembering the last user logged so users just need to enter their pin or have EM not log users out at all… both got rejected.

View 2 Replies View Related

User Can't Login Into Domain With Right Credentials In Active Directory

Feb 19, 2013

user can't login into domain with right credentials in active directory

View 6 Replies View Related

Cisco VPN :: ASA 5520 - Login DN Account Locked Out In Active Directory

Mar 6, 2011

We are using ASA5520 as our VPN concentrator and has configured IPSec authentication using digital certificates with Microsoft CA for the remote access VPN. The AAA server used for remote user authentication is Windows Active Directory. Screenshot of the AAA configuration is attached. The problem we face is that the "Login DN" account (marked in red box in the screenshot) is frequently getting locked out in the active directory. I have confirmed that the password is the same on both ends and the account is not used any where else.
 
The NTP server configured for the VPN concentrator is the Active Directory itself but no accounts are configured (not required) for updating the time service in the concentrator.

View 2 Replies View Related

AAA/Identity/Nac :: ACS 5.2 With Active Directory

Mar 7, 2011

I have installed ACS 5.2 and configured it to join the Company's Domain as an External database with Active directory 2008. I'm facing a problem that the user once authenticated using it's active directory account it's cached in the ACS and take a while for the ACS to clear this username. For example, if user TEST authenticates and then we removed this user from the AD and then tried again; it authenticates although this users is removed from the AD !!! same thing happens when we change the user group on the AD, it takes a while for the ACS to clear the old user attributes and get the new ones from the AD.
 
it there an aging time for this caching mechanism, or can i clear the dynamic users manually just like in ACS 4.X ?

View 3 Replies View Related

Servers :: Set Up Active Directory Without DHCP

Mar 23, 2011

I am trying to set up a small domain for my business. I just purchased a Windows 2008 server and would like to use it as my domain controller.Also, I just had a new ATT DSL line put in. It came with a 2Wire modem/4-port router/wireless router device, therefore the modem can handle DHCP. The line has a static IP address as well so that I can eventually use my own exchange server and web server.I have tried 2 different configurations and couldn't get either to work) I tried to put the router into Bridged Mode and use DHCP server on my server using a PPPoe connection to connect to the Internet. I was confused as to what my static IP address and default gateway of my server should be.2) Then I tried to turn DHCP server off on the server and routing back on the modem/router. This didn't work either.What method would you recommend and why? Also I have some additional questions on each method.

Method 1)

* What is the static IP address of the server. Is it in the 192.168.1.x address or the static IP assigned to my account?

* Do I need a second Nic Card And Router to connect to the rest of my network or can I use the router provide

* What would the Static IP addresses of the additional PC be. Do I need more than 1 static IP from AT&T Method 2)

* Will this allow me to use all internal IP addresses on my machines and use port forwarding if I want a specific box to be a web server or exchange server.

View 18 Replies View Related

Adding Computers To Active Directory?

Aug 27, 2012

I know that when you create a user account in active directory, the user's computer is also added to active directory. However, in what circumstance would you add a computer to active directory in which there are no user accounts created, or used ?For instance, my Linksys wrt54g router, on the main configuration tab has a space to name the router, which is appropriate called, "Linksys", and it has space to enter it's domain name, which if I named it, I guess it would be. LinksysRouter.**.local.Why add a router to an active directory domain ?Why add any other computer to an active directory domain with no users associated with it ?

View 11 Replies View Related

How To Implement Isa Server And Active Directory

Nov 29, 2012

I have 1 server where i enabled dhcp server and active directory on it . I still have to install something like ISA server on it as isa doesnt support 2008 r2. point me out on the networking , like how should i connect the clients to the server. And how the wireless router and switch should be connected to the server?

View 1 Replies View Related

Adding MS Office To Active Directory

Jan 26, 2011

I've got a fully working active directory with mandatory profiles. I'm looking into adding MS Office 2007. I have the disk and everything, but I'm wondering how to go about installing it. Must I go around each workstation installing it?

View 1 Replies View Related

Cisco VPN :: SSL VPN With Active Directory On SR520

Apr 7, 2011

Having problems configuring an SR520 to support SSL VPN with Active Directory authentication. I set up the domain  and a user in the SR520. and get the login prompt remotely but when attempting to login using the active directory account i get a login error. I can login fine using local authentication.

View 5 Replies View Related

Cisco :: Active Directory Authentication Failing?

Feb 16, 2012

I am not sure why but when I try to connect with my IPSEC VPN client, authentications are failing. The ldap test passes on the ASA but when I try to login, the VPN client gives me authentication failure even though debugs show authentication was successful.User 'test1' should be able to authenticate based on group membership.User 'test2' shouldn't be able to.I already removed the attribute-map to see if that was the problem but I am still failing authentication.

View 9 Replies View Related

Active Directory - Required Bandwidth Usage?

Feb 18, 2012

Currently We have several Active Directory Domain at several Technical High Schools. These are used by us as a it educational unit(s). The Tech School System's IT Department has a fiber wan between the schools that allows communication between these units. We wanted to interconnect the unit's Active Directory's with Trusts or by combining them into one forest. However I am wondering How much bandwidth that alone would require? There make be some file access between units but not on a daily basis since the units are separate from one another. How much bandwidth do you think this would require?

View 5 Replies View Related

Active Directory In One Domain Across Time Zones

Feb 1, 2013

I am adding a site in another time zone but keeping the same active directory and domain. the time zone issue if there are no servers in the other time zone?

View 1 Replies View Related

Cisco AAA/Identity/Nac :: Active Directory And ACS 5.3 Failure?

May 21, 2012

I am receiving a RADIUS authentication failure stating user must change password; however, password has been changed in AD and is not requiring change password any longer on the AD side.
 
Is there a cache on the ACS that needs to be cleared? AD connection from ACS to domain is fine.  All other accounts authenticate.
 
It appears that if a user lets their account expire is when this happens.  Account has been reenabled in AD and password has been changed.  Still will not authenticate via ACS.

View 1 Replies View Related

Cisco AAA/Identity/Nac :: Active Directory Integration Acs 5.1?

Aug 24, 2011

I'm attempting to integrate an acs 5v into the domain through the gui. The connection will establish, and the status will read 'connected', just as it lists the domain I've submitted. However, I can't seem to find anything listed under the directory groups, and when I run a connection test, I simply get 'Global Catalogue port status error.' Eventually, I'd like to configure this as a radius server.

View 1 Replies View Related

Cisco AAA/Identity/Nac :: 802.1x / ACS In The Active Directory Environment?

Nov 9, 2011

question 1. in the typical active directory environment and doing wireless/wired 802.1x authentication on endpoints, should ACS join as a domain computer? 
 
question 2. for the endpoint (domain computer) join the domain, in this case is the endpoint will trust the ACS ( also domain computer) ?
 
question 3. what if there's a GPO policy to install the rootCA certificate toward the endpoints. In this case,  ACS should issue the CSR and let the domain CA to signed as the identity certificate? Am i correct?

View 2 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.2 Does Not Check Active Directory Changes

Oct 13, 2010

I am working with ACS 5.2 and using Radius authentication for vpn client.
 
The authentication method used is Active Directory in an Windows enviroment with multiple domains in the same forest.
 
My problem occurs when i change a user from one group to another in Active Directory. After that i receive the following message when try to connect:
 
15039 Selected Authorization Profile is DenyAccess
 
The message is because match the default policy. Another user in the same AD group works fine. All domain in the forest have trust relation each other. I am using universal groups to include users from all domain belongs this forest.

View 4 Replies View Related

Cisco :: WLC 2500 Active Directory Integration?

Apr 10, 2012

I recently bought a Cisco WLC 2500. I want to configure a WLAN with Active directory authentication.How I can do this?

View 4 Replies View Related

Cisco :: LMS 3.2 Integration With Microsoft Active Directory

Jun 14, 2012

i need a documentation or a procedure to how make integration LMS 3.2 with microsoft active directory to make usernames of devices  appear in end hosts reports.

View 2 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.2 Active Directory Integration

Apr 24, 2012

A customer uses Active Directory where some group names contain special characters (ç ~ '^). The Cisco ACS 5.2 is presenting the warnings: "Not all Active Directory user groups are retrieved successfully. One or more of thegroup's canonical name was not retrieved "(Category CSC Oacs_ Identity_ Stores_Diagnostics; code 24457).

What are the results of these warnings to the customer's network? Slow? Loss of access?

View 1 Replies View Related

Cisco AAA/Identity/Nac :: Integration Of ACS 4.2 And MS Active Directory

Oct 21, 2010

configure the Cisco ACS to authenticate the users from MS Active Directory. Cisco Acs = 4.2.1(15)Currently, i have multiple users configured as local databse. but now i want to authenticate with the domain users.

View 11 Replies View Related

Cisco :: Integrate 1250 To Active Directory

Jan 5, 2011

I have installed 4 unit Cisco Aironet 1250 acting as Autonomous AP each. I want to integrate these AP to Windows Active Directory for authentication level.
 
When I read configuration guide on Cisco Aironet, they must be authenticated via RADIUS server.
 
Is it possible that these AP directly authenticated to Active Directory via LDAP protocol?

View 4 Replies View Related

Connect A Client Computer To An Active Directory Via The Internet?

Dec 20, 2011

Is it at all possible to connect a client computer to an Active Directory via the Internet?

If so, would you change the client's DNS server to the remote IP, and then connect?

View 6 Replies View Related

Cisco Firewall :: 5515 Web VPN Using Active Directory To Authenticate

Apr 15, 2013

I have a 5515 ASA that has the webVPN configured on it and it is using active directory to authenticate. The client would like to set up groups in active directory and restrict access to those groups when they are connected to the webVPN. For example, they have a group in active directory that they only want to access their "web" interface. What is the best way to configure this on the asa?

View 2 Replies View Related

Cisco Wireless :: WAP4410n Authenticating To Active Directory?

Aug 22, 2011

I have a WAP4410n which I'd like to authenticate users against our corporate active directory. I would like to know how to achieve this - whether we require a dedicated RADIUS server, whether AD has a RADIUS engine which can be used, etc. Also, what would the pros / cons be of this setup versus using a WPA2 password?

View 2 Replies View Related

Cisco AAA/Identity/Nac :: Authenticate ACS 5.2 Administrators To Active Directory?

Mar 21, 2011

Rather than maintaining local accounts is it possible to authenticate admins against AD?  I'm talking about administrators of the ACS server itself to be clear.

View 2 Replies View Related

Cisco VPN :: Manage ASA 5520 (8.2.5) SSL Clients Through Active Directory?

Dec 24, 2012

We are trying to manage our Cisco ASA 5520 (8.2.5) SSL clients through Active Directory(ldap).

Currently the SSL VPN tunnel is up and all users are able to connect being authenticated by AD. but Group-policy to AD groups are not working. all the domain users are able to go to all the group policies .
 
I need to give access only to their respective Group policy in ASA.  Following are the available groups and GP.
 
Code...

View 3 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.3 Active Directory Users Cache?

Jun 9, 2013

I've successfully integrated ACS 5.3 with Active Directory for 802.1x implementation. Now i want to cache Active Directory users in ACS so that the user request from ACS does not go to AD every time.
 
After a certain time period the ACS database gets sync with AD.

View 3 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.1 Active Directory No Administrator Account

Jul 14, 2011

I can add a ACS 5.1 to an Active Directory without using the administrator account, I have a domain administrator account by another name. I can use this account to include the ACS domain.
 
I have a account domain admin but when i try to add the ACS to AD have this message "can not resolve network address"
 
The DNS and network connectivity its OK

View 1 Replies View Related

Cisco AAA/Identity/Nac :: Good Guide For 802.1X With ACS 5.2 With Active Directory

Sep 6, 2011

if someane has a good guide for 802.1X with ACS 5.2 with Active Directory.

View 1 Replies View Related

Cisco AAA/Identity/Nac :: ACS 4.1 For Windows With Active Directory 2008

Sep 26, 2010

We are still running ACS 4.1 on Window 2003 server.  We recently upgraded AD to 2008 although the domain and forest functional level are still 2003.  After AD upgrade we now unable to authenticate via ACS Windows Database.

View 13 Replies View Related

Cisco AAA/Identity/Nac :: 5508 And Active Directory Integration Using EAP?

May 24, 2011

I have just recently purchased a 5505 Controller and 30 3502i AP's. On my main corporate WLAN, I would like to allow users to be able to authenticate via Active Directory username and password.I am also looking for as little client side set up as possible. From what I have researched, I will need to use some type of EAP method.
 
I have come across two methods that appear to be the top contenders.
 
EAP-FAST - The method seems to be a possibility but I see that it uses certificates. If I use this method, does it mean that I would have to import the certificates to each machine manually? Also, can I configure thsi to work with just the 5508 Controller and an AD Database server or do I need an intermediary like IAS or ACS?
 
PEAP/GTC - This method is also a possibility and I think that it does not require certificates. Does this also require an intermediary like ACS or IAS.

View 3 Replies View Related

Cisco :: LMS 2.6 And ACS 4.2 Compatible With Windows 2008 R2 Active Directory?

Dec 28, 2011

We are planning to upgrade CORP Domain from Windows 2003 Active Directory Schema to Windows 2008 R2 Active Directory Schema.
 
I wanted to know if the following applications which are installed on windows (domain member servers) are compatible with windows 2008 server R2 schema?
 
CiscoWorks LAN Management Solution 2.6 Cisco Secure Access Control System 4.2Cisco Fabric Manager 1.5 

View 5 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved