Scott,I have experienced the same problem when building 871 routers for our remote users. However, the problem goes away when we add the commands shown below to the routers. Unfortunately, I have not looked at the problem more than this, since thes...

Here is how I am denying commands on my ACS Server for Senior Admins: Unmatched Commands: PermitUnmatched Args "checked"enable deny password deny secretusername deny passwordwrite deny erase

Here is the ACS answer...Management applications, such as CiscoWorks and Cisco Secure ACS, use the time provided by the operating system. Therefore, in order to resolve the DST issue, you must install the operating system patch that contains the fix ...