ACS 3.2 for Windows and Windows Active Directory.

[andrea.meconi]

I'm using a member W2K server to run ACS 3.2.

I'm using ACS and Windows group mapping but my users always go into default group.

Why?

Thanks.

Andrea.

[pvanvuuren]

I'm assuming your ACS \DEFAULT domain has NT Groups mapped to . Use a new Domain Configuration to add your AD and group mappings.

The group name in ACS must match exactly the same group in AD. ie. If your AD group name is "Engineering" , create a ACS group with exactly the same spelling. Also,avoid certain characters such as @#%&*() in the naming of groups, both in AD and ACS.

Hope this helps. let us know.

P

[andrea.meconi]

Thanks a lot.

Yes, NT and ACS name group is the same.

A.

[pvanvuuren]

Is it still not working? Check also there are no ACL blocking ICMP between the ACS and the AD.

Windows Domain Controler need ICMP to send security credential to the windows part of ACS. It sends a ping to the ACS server before sending policys.

P