Account not allowed to log on by using the current workstation

Is this a bug in ACS 5.3.0.40.4?

We have some AD user accounts that are allowed to connect on some computers. I am able to connect to computers are allowed with the AD-account, but the 802. 1 x fails and the client cannot obtain a network connection. It's on the vlan right, but he cannot ping the default gateway and is not set to the guest VLAN. In the ACS journal, we see the error "" EAP session expired: 24441 account not allowed to log on using the current workstation".

I checked it by testing another user. I limited the user to only connect to a single computer. I then logged on this computer, and shortly after I lost the network connection and the same error in the log.

This means that the 802. 1 x fails if you try to limit which computers a user account can connect to AD. If anyone has experienced this before?

I know that he is two years, but we just encountered the same problem, but with ISE 1.2.  ISE and ACS MUST be added to the list of computers that are allowed for the user.  Which does not require that the ISE or ACS is in the same domain as the users, which would be a problem for the person who started this chain.  The "current workstation" in the error message "account 24441 not allowed to log on by using the current workstation" refers to the ACS or ISE, not end machine, as explained above maldehne.  This is because, for the most part, the user logs in ACS or ISE in order to authenticate against AD.  Not directly, but it's how 802. 1 X.  Added once ACS or ISE, authentication works perfectly (as long as everything else is correct.)

Tags: Cisco Security

Similar Questions

Maybe you are looking for

  • Satellite A-Z30-16F - keyboard problem

    Hi, this is my first post in this forum I have big problems with the keyboard on my Satellite Z30-A-16th.Two keys have fallen and I can't get back in because the 'hooks' that hold the key are folded or dropped.The worst is that the other two keys are

  • How to print a list of the contents of a hard drive?

    I have several hard drives, going back 7 years now and I want to sort through them to back up important files.  How can I print a list of the contents of a disc on my iMac that will help me in the archive and help me manage this backup files which ar

  • Satellite A200 - question on Slot Express

    Can someone tell me if the PSAf6A uses the same location for cards PCMCIA and Express Card accessories?

  • When you use the Windows Media Player received the 80070005 error message.

    Windows Media Player works just music, no video. not updated with the latest version for windows xp. My system is original. to update this error message: while using Windows Media Player received the 80070005 error message. Currently, there is no oth

  • Address IP VC for testing

    Anyone have the address of IP video conferencing work to test? Cisco have? something like [email protected] / * / , but in IP address. Thank you