You would setup a new group in your AD domain, and then map it to a new group on the ACS. Then, set the default group to the "default" ACS group, and disable this group. You can create multiple NT group mappings and use per group settings to allow them access to certain resources, via downloadable ACL's for example.
HTH, Fred Reimer, CISSP, CCNP, CQS-VPN, CQS-ISS Senior Network Engineer Coleman Technologies, Inc. 954-298-1697 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ahmad Cheikh-Moussa Sent: Thursday, December 06, 2007 11:45 AM To: [email protected] Subject: [c-nsp] Question to ACS Hi! I don't know, whether this is the right list or not. I have an ACS Appliance which is connected to an Active directory Server. The configuration for that connection is done in the external database configuration. All user within the domain can be authenticated. Now I do not want that every active directory user can log to the network. I want to add a group into the active directory and only this user, who are a member of this group should be allowed to log in. I think this would be done in the external database configuration of the ACS. Does anyone knows, how to configure this ? Can I configure the name of such a group in the GroupAttributeName ? Regards, Ahmad -- Ahmad Cheikh-Moussa NetUSE AG Dr.-Hell-Straße, 24107 Kiel, Germany Telefon: +49 431 2390 400 -- Telefax: +49 431 2390 499 Service: [EMAIL PROTECTED] -- http://NetUSE.DE/ Vorstand: Andreas Seeger (Vorsitz), Dr. Roland Kaltefleiter, Dr. Joerg Posewang Aufsichtsrat: Detlev Huebner (Vorsitz) Sitz der AG: Kiel, HRB 5358 USt.ID: DE156073942 Diese E-Mail enthaelt vertrauliche oder rechtlich geschuetzte Informationen. Das unbefugte Kopieren dieser E-Mail oder die unbefugte Weitergabe der enthaltenen Informationen ist nicht gestattet. The information contained in this message is confidential or protected by law. Any unauthorised copying of this message or unauthorised distribution of the information contained herein is prohibited. _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
