topic Re: How do you selectively disable users validated by nt domain? in Network Security

How do you selectively disable users validated by nt domain?

bswitzer — Fri, 21 Feb 2020 07:00:28 GMT

We are validating our sw vpn users on our 3030 via nt domain. Therefore there are no individual userids.

How can we selectively disable certain users? e.g. A few office workers not allowed to come in from home.

If this were Windows / RAS we could uncheck the dialin box on their user profile - is there some similar setting within Windows for sw VPN users?

Or even better, are these domain authenticated users authenticated against any particular nt group, from which we could then remove them?

Re: How do you selectively disable users validated by nt domain?

jsivulka — Tue, 30 Sep 2003 19:01:25 GMT

With NT Domain Authentication, what you are trying is not possible. What you need to do is to configure the concentrator to use Radius. You could refer to http://www.cisco.com/warp/public/471/cisco_vpn_msradius.html and http://www.cisco.com/warp/public/471/vpn3k_ias.html for more configuration information.

Re: How do you selectively disable users validated by nt domain?

bswitzer — Tue, 30 Sep 2003 21:58:53 GMT

Thanks kindly for your note. I'll have to check into this further.

If you are able to, this issue should be submitted as a bug / feature enhancement.

If you can query nt for whether or not they're a valid user, you should also be able to query whether or not they are members of the defined group. e.g. admins vs. guests.