VPN 3000 using AD auth. - How do I disable accounts from VPN

[admin_2]

I have a Cisco VPN 3000 concentrator that uses AD authentication to my domain controller. Everyone in AD can connect. How do I continue to authenticate through AD but only allow specific accounts to use the vpn? Or deny specific accounts from using the VPN?

[Brandon Buffin]

You'll need to configure IAS on your Windows server to make this happen. There is no way to do this with authentication from the concentrator directly to AD. Take a look at the following link.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_example09186a0080094700.shtml

Hope this helps.

Brandon