Cisco Systems Servers Windows NT/2000 Authentication

Chapter11 Working with User Databases

Windows NT/2000 User Database

11-10

Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide

78-13751-01, Version 3.0

If you use the Windows95/98/ME Dial-Up Networking client to dial in to the

AAA client, two fields appear:

•username—Type your username.

Note You also have the option of prefixing y our username with the name of

the domain you want to log in to. For more information about the

implications of prefixing or not prefixing the domain name before the

username, see the “Windows NT/2000 Authentication” section on

page 11-10.

•password—Type your password.

Windows NT/2000 Authentication

While the Windows NT/2000 and Windows 95/98/ME provide different methods

of specifying a domain name, the effect of providing or not providing the domain

name while logging in is the same.

The most reliable method of authenticating users against a specific domain is to

require users to submit the domains they should be authenticated against along

with their usernames. With the WindowsNT/2000 dial-up client, this is

accomplished by typing the domain in the domain field (or selecting it from the

drop-down list). With the Windows95/98/ME dial-up client, this is accomplished

by submitting the username in the fully qualified format. Users submitting a fully

qualified username must enter the domain name before their username in the

following format:

DOMAIN_NAME\USER_NAME

For example, user Mary Smith (msmith) in Domain10 would enter the following:

Domain10\msmith

Another reason to provide the username in the format shown above is if a user is

included in more than one domain. In this case, the privileges assigned upon

authentication will be those associated with the account in the first domain with a