Core issue
The issue is seen with CiscoSecure ACS for Windows versions 3.2 and 4.0 and is documented in Cisco bug ID CSCsa79327.
Users that utilize the euro symbol or any other German characters in the password defined on Active Directory (AD) fail authentication to CiscoSecure ACS for Windows.
Resolution
The only workaround is to remove the euro symbol from the user password.