13-7
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Chapter 13 User Databases
Windows User Database
Windows User Database
You can configure Cisco Secure ACS to use a Windows user database to
authenticate users.
This section contains the following topics:
• What’s Supported with Windows User Databases, page 13-8
• Authentication with Windows User Databases, page 13-9
• Trust Relationships, page 13-9
• Windows Dial-up Networking Clients, page 13-10
–
Windows Dial-up Networking Clients with a Domain Field, page 13-10
–
Windows Dial-up Networking Clients without a Domain Field,
page 13-11
• Usernames and Windows Authentication, page 13-11
–
Username Formats and Windows Authentication, page 13-11
–
Non-domain-qualified Usernames, page 13-13
–
Domain-Qualified Usernames, page 13-14
–
UPN Usernames, page 13-14
• EAP and Windows Authentication, page 13-15
–
EAP-TLS Domain Stripping, page 13-16
–
Machine Authentication, page 13-16
–
Machine Access Restrictions, page 13-19
–
Microsoft Windows and Machine Authentication, page 13-20
–
Enabling Machine Authentication, page 13-22
• User-Changeable Passwords with Windows User Databases, page 13-25
• Preparing Users for Authenticating with Windows, page 13-26
• Windows User Database Configuration Options, page 13-26
• Configuring a Windows External User Database, page 13-30
