https://community.cisco.com/t5/network-access-control/group-nt-authenticated-users/m-p/151264#M6264 <HTML><HEAD></HEAD><BODY><P>Are you talkng about the VPN3000 default group, or the ACS server default group?</P><P></P><P>If the VPN3000, they'll be put into whatever group they have configured in the VPN client.</P><P></P><P>If the ACS, the you can set up Database Group mappings under the External User Database section and map users into a specific ACS group dependent on what Windows NT groups they're members of.</P></BODY></HTML> Tue, 11 Feb 2003 04:01:28 GMT gfullage 2003-02-11T04:01:28Z https://community.cisco.com/t5/network-access-control/group-nt-authenticated-users/m-p/151263#M6263 <P>Hi,</P><P></P><P>When the vpn users are authenticated with NT accounts, they will be put into the default group by default.</P><P></P><P>Is there a way to change the default behavior?</P><P></P><P>Thanks,</P><P></P><P>Wei</P> Fri, 21 Feb 2020 18:05:59 GMT https://community.cisco.com/t5/network-access-control/group-nt-authenticated-users/m-p/151263#M6263 wei.hu 2020-02-21T18:05:59Z https://community.cisco.com/t5/network-access-control/group-nt-authenticated-users/m-p/151264#M6264 <HTML><HEAD></HEAD><BODY><P>Are you talkng about the VPN3000 default group, or the ACS server default group?</P><P></P><P>If the VPN3000, they'll be put into whatever group they have configured in the VPN client.</P><P></P><P>If the ACS, the you can set up Database Group mappings under the External User Database section and map users into a specific ACS group dependent on what Windows NT groups they're members of.</P></BODY></HTML> Tue, 11 Feb 2003 04:01:28 GMT https://community.cisco.com/t5/network-access-control/group-nt-authenticated-users/m-p/151264#M6264 gfullage 2003-02-11T04:01:28Z https://community.cisco.com/t5/network-access-control/group-nt-authenticated-users/m-p/151265#M6265 <HTML><HEAD></HEAD><BODY><P>It is about VPN3000 default group. The VPN Client is Microsoft VPN client.</P><P></P><P>The Client is also authenticated with certificate. I can see during the group authenticate (using "ou"), the client is put into correct group. But for the user authentication, it changes to use the default group again.</P><P></P><P>Regards,</P><P></P><P>Wei</P></BODY></HTML> Tue, 11 Feb 2003 22:36:25 GMT https://community.cisco.com/t5/network-access-control/group-nt-authenticated-users/m-p/151265#M6265 wei.hu 2003-02-11T22:36:25Z https://community.cisco.com/t5/network-access-control/group-nt-authenticated-users/m-p/151266#M6266 <HTML><HEAD></HEAD><BODY><P>Hi!</P><P></P><P>From what I know the Windows VPN client does not support Cisco groups which is why all users connecting thru it will end up in the VPN3000 Base Group.</P><P></P><P>Regards</P></BODY></HTML> Fri, 21 Mar 2003 15:21:16 GMT https://community.cisco.com/t5/network-access-control/group-nt-authenticated-users/m-p/151266#M6266 Blixten 2003-03-21T15:21:16Z