Re: IAS as RADIUS



"Phillip Windell" <@.> wrote in
news:#IgVAV10GHA.3464@xxxxxxxxxxxxxxxxxxxx:


"James McIllece [MS]" <jamesmci@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:Xns983792BAA6BCBjamesmcionlinemicros@xxxxxxxxxxxxxxxx
"the" <shirtrippa@xxxxxxxxxxx> wrote in
news:eDpR1iq0GHA.2072@xxxxxxxxxxxxxxxxxxxx:
Yes, you can do this with IAS in Windows Server 2003.

To do so without using AD, you need to create user accounts on the
IAS server in the local Security Accounts Manager database (Local
Users and Computers.)

Ok, very good. I didn't know if it would work off of local accounts or
not. I thought it required a Domain Controller.


Hi Phillip --

If the IAS server is not joined to a domain, using the SAM database is the
default behavior.

If it is joined to a domain but you don't want it to use AD, then setting
the Default Domain registry key allows you to default to the local SAM (or
any specific domain; the value you specify is the local computer name for
the local SAM)

System\CurrentControlSet\Services\RasMan\PPP\ControlProtocols\BuiltIn\Defau
ltDomain

Alternatively, you may use attribute manipulation (find (.*) replace
Domain\$1)

The default domain registry key is documented in the IAS Technical
Reference at
http://technet2.microsoft.com/WindowsServer/en/library/8f5c89d5-fdaf-430c-
9ef4-318f8c15baf11033.mspx?mfr=true


--
James McIllece, Microsoft

Please do not send email directly to this alias. This is my online account
name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no rights.
.



Relevant Pages

  • Re: IAS issue
    ... I am using this purely to use Windows accounts to control Telnet ... sessions to the switches for a more controlled configuration ... The IAS server then responds with Auth_Failure. ... The event log gives the error as incorrect username or password and the ...
    (microsoft.public.internet.radius)
  • Re: Referrals to another domain
    ... You will find this link useful: ... If the IAS server authenticates and authorizes wireless connection attempts ... two-way trust with the domain in which the IAS server computer is a member. ... accounts in other domains. ...
    (microsoft.public.internet.radius)
  • Re: UserAccountControl Attribute
    ... specific user objects (enabled user accounts) that appear to be missing those ... How can I view the attributes of the user objects in question? ... foreach (string parameter in Parameters) ...
    (microsoft.public.win2000.active_directory)
  • Re: Access 2003 application with MSDE backend connection error in
    ... I'm trying to create a connection using my deployed application. ... >> our internal network where the MSDE database is installed. ... >> the necessary user accounts to it. ...
    (microsoft.public.access.developers.toolkitode)
  • Re: Radius Server W2k 2003 without AD ??
    ... > SAM user accounts database on the Windows Server 2003 IAS server. ...
    (microsoft.public.internet.radius)

Loading