ACS 5.x how do i limit who can authenticate to devices when using AD

[mohdjeddi]

Hi everybody,

I am deploying ACS 5.4 and i configured AD as an external database and configured authorization based on the group. but right now anybody can authemticate to the device using their AD creds, they get assigned to the deny all commad set, but i don't want them to be able to access the device, how can i limit that?

[jrabinow]

You need to change the result of the default authorization rule at:

Access Policies >

Access Services >

Default Device Admin >

Authorization

Edit default rule. Select "DenyAccess" as the Shell Profile result and save