ACS 2.6 on domain controller or on member server

[ROBERTO TACCON]

Does someone know if Cisco Secure ACS 2.6 installed as domain controller or as member server change in functionality ?

Thanks.

[jeremys]

It used to be (prior to ACS 2.5), that ACS had to be installed on a primary or backup domain controller in order to authenticate against NT domains. In ACS v2.5 and 2.6, that requirement is no longer there. ACS can be installed on any member server and have equivalent functionality.

NOTE: ACS will run fine on a member server if configured properly. However, there have been reported issues where inter domain authentication has failed, but this has always been associated with a problem in how the server was joined to the domain. Servers should be joined using the server manager on the domain controller, not in the network id configuration on the member server itself. The latter instance will appear to work, but the inter domain authentication will fail with a "permission denied" error.

Thanks,

Jeremy

[ROBERTO TACCON]

The problem in how the server join to the domain is a Cisco ACS 2.5/6 "problem" or is a due to Microsoft implementation?

Thanks in advance

Robert