"Failed to Enumerate Windows Groups" error on ACS

[m-carey]

I am trying to link my Cisco ACS v3.3 to my 2003 Active Directory domain for authentication. I am receiving this error:

"Failed to Enumerate Windows Groups. If you are using Active Directory consult the installation guide for information".

The only caveat on Cisco was from 2002 saying there might be some issue with Active Directory, but they are working with Microsoft to resolve it.

They aren't that many options, so I don't know what I am doing wrong?

[didyap]

Check if you have service pack 1 installed on your Windows 2003 AD.

[kris55s]

Check what NTLM version you are running for Active Directory. If you are running anything higher than NTLMv1, you will not be able to authenticate against your AD database.