Cisco 3.3 - Windows User Database

13-7
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Chapter 13 User Databases
Windows User Database
Windows User Database
You can configure Cisco Secure ACS to use a Windows user database to
authenticate users.
This section contains the following topics:
• What’s Supported with Windows User Databases, page 13-8
• Authentication with Windows User Databases, page 13-9
• Trust Relationships, page 13-9
• Windows Dial-up Networking Clients, page 13-10
– Windows Dial-up Networking Clients with a Domain Field, page 13-10
– Windows Dial-up Networking Clients without a Domain Field,
page 13-11
• Usernames and Windows Authentication, page 13-11
– Username Formats and Windows Authentication, page 13-11
– Non-domain-qualified Usernames, page 13-13
– Domain-Qualified Usernames, page 13-14
– UPN Usernames, page 13-14
• EAP and Windows Authentication, page 13-15
– EAP-TLS Domain Stripping, page 13-16
– Machine Authentication, page 13-16
– Machine Access Restrictions, page 13-19
– Microsoft Windows and Machine Authentication, page 13-20
– Enabling Machine Authentication, page 13-22
• User-Changeable Passwords with Windows User Databases, page 13-25
• Preparing Users for Authenticating with Windows, page 13-26
• Windows User Database Configuration Options, page 13-26
• Configuring a Windows External User Database, page 13-30