Cisco Systems Servers Server User Manual


 
Chapter 11 Working with User Databases
Windows NT/2000 User Database
11-10
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
About the Windows 95/98/Millennium Edition Dial-up Networking Client
If you use the Windows 95/98/ME Dial-Up Networking client to dial in to the
AAA client, two fields appear:
usernameType your username.
Note You also have the option of prefixing your username with the name of
the domain you want to log in to. For more information about the
implications of prefixing or not prefixing the domain name before the
username, see the Windows NT/2000 Authentication section on
page 11-10.
passwordType your password.
Windows NT/2000 Authentication
While the Windows NT/2000 and Windows 95/98/ME provide different methods
of specifying a domain name, the effect of providing or not providing the domain
name while logging in is the same.
The most reliable method of authenticating users against a specific domain is to
require users to submit the domains they should be authenticated against along
with their usernames. With the Windows NT/2000 dial-up client, this is
accomplished by typing the domain in the domain field (or selecting it from the
drop-down list). With the Windows 95/98/ME dial-up client, this is accomplished
by submitting the username in the fully qualified format. Users submitting a fully
qualified username must enter the domain name before their username in the
following format:
DOMAIN_NAME\USER_NAME
For example, user Mary Smith (msmith) in Domain10 would enter the following:
Domain10\msmith
Another reason to provide the username in the format shown above is if a user is
included in more than one domain. In this case, the privileges assigned upon
authentication will be those associated with the account in the first domain with a