http://www.ccbootcamp.com/keith-cln.mov is not active anymore, do we have any other video available for this.

Seems like you might be hitting bug CSCsh66748.Hope you have tried "enable " command to enter enable mode for specific users.BTW why are you using different privileges for enable when you already have command authorization in place.RegardsRohit

Following links will help:ASA setuphttp://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/fwaaa.html#wpmkr1048550ACS setuphttp://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/user/UsrMgt.html#wp2...

configure accounting on ASA and configure max-sessions=1 in ACS under Group/User setup.~Rohit