Dynamic Maping to ACS groups using OU instead of NT group

[jcosgrove]

Is there a way to us the Microsoft AD OU groups instead of using the old NT groups to dynamically mapping users to the ACS groups? We are using ACS server at vers 3.2 as well as some test server on 3.3.

[didyap]

Cisco Secure ACS for Windows Servers 3.2 only supports two versions of the Windows 2000 operating system

1)Windows 2000 Server, with Service Pack 3 or Service Pack 4 installed

2)Windows 2000 Advanced Server, with the following conditions:

with Service Pack 3 or Service Pack 4 installed

without Microsoft clustering service installed

without other features specific to Windows 2000 Advanced Server enabled

[jcosgrove]

And this answers my question how?

[paul.mancuso]

I am afraid there is no way to use Active Directory's OU's in this manner since they are not security descriptors. They are only used to segment Active Directory which is unlike Novell's eDirectory where OU's act much like groups, Microsoft's OU's do not. There is no way to turn this on or change this behavior. A very sad decision on MS's part unless Longhorn Server's version of AD changes this feature.