Cisco ACS and the domain controller

Hello

We are currently using the Cisco ACS 3.2.3.11 solution engine and using a Windows domain as a remote agent controller.

We now have the ACS to 4.1

1. do I need to upgrade the remote agent on the domain controller as well?

2. any computer on the network can be used as a Distribution Server?

3. after an initial backup and upgrade then to 3.3.3.3 I make another backup before the upgrade to 4.1?

You can use any PC in the network as a Distribution Server.

Tags: Cisco Security

Similar Questions

  • the best practice is implemented Server Exchange and the domain controller in the same server

    the best practice is implemented in exchange server and the domain controller in the same server or
    put on another server

    Hello

    Your question of Windows 7 is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the public on the TechNet site. Please post your question in the following link for assistance:
    http://social.technet.Microsoft.com/forums

  • "The relationship of trust between the Client and the domain controller has been lost."

    I had a client PC connected to a DC running 2003 SBServer.

    It was this error when he tried to connect with its domain account.

    "The relationship of trust between the Client and the domain controller has been lost."

    I had to connect as Administrator local and leave/re-join the domain with a different machine name.
    How can I fix the side Server?

    Hello

    The question you posted would be better suited to the TechNet community. Please visit the link below and validate the request.

    http://social.technet.Microsoft.com/forums/en-us/smallbusinessserver/threads

    Hope this information is useful.

  • Cannot connect to the local file and print when the domain controller is not available because the network connection

    Hi all
    Having problems for local users, connection to a file and print server in one of my satellite offices.
    When my t1 connection is disrupted (problem of local carrier) my users when the connection is down to connect to the file room and print and always have access to their files and the local printer.
    The domain controller is off site in my main office.
    Environment:
    All local desktop clients are windows machines 7.
    Printing and local file is a windows 2003 server.
    DC is window 2008
    Note that we recently changed all 2003 to all domain controllers the PDC 2008, suspect that it may cause the problem, but just cannot know where it track.
    Any help or thoughts would be appreciated.
    Thank you

    Hello trj'hwma,

    Thank you for the question!

    It's discouraging to know that have problems you with the local file and print. As I understand well you cannot connect to the local file and print when the domain controller is not available because the network connection.

    The question you posted would be better suited in the TechNet Forums. I would recommend posting your query in the TechNet Forums. You can follow the link to your question:

    Windows 7 IT Pro category

    Answer to us if you have problems with the local files and print or any other issue of Windows, and I'd be happy to help you again and try to correct the problem as soon as possible.

    Good day!

    Hope this information helps.

  • At the old version of adobe reader and upgrade inadvertently WAA CD player. realized that I could change is no longer with this and tried to uninstall and reinstall and older versiono, but could not. Tried to reinstall the domain controller new version an

    At the old version of adobe reader and upgrade inadvertently WAA CD player. realized that I could change is no longer with this and tried to uninstall and reinstall and older versiono, but could not. Tried to reinstall the domain controller new version and it would not, indicating that the newer Version is already installed. Nothing in programs and features.

    Looks like a job for the cleaning tool: Download Adobe Reader and Acrobat tool - Adobe Labs.

    If you prefer XI player, make sure that "Install updates automatically" is not enabled under Edit > Preferences > Updater. It is possible to download and apply patches manually.

  • How to test the domain controller security policy works or not?

    How to test the domain controller security policy works or not?

    So far, I put a security policy in the domain controller security policy, however, I do not affect client computers joined to the domain controller. and so far, if I apply the domain security policy work.

    LiuAlex

    Server must wonder about the Technet site.  http://social.technet.Microsoft.com/forums/en-us/home

  • Error when connecting to the domain controller

    In the logon window, the error message is "cannot connect to the domain either because the domain controller is down or unavailable your computer account has not been found."

    Hello

    Thank you for visiting the website of Microsoft Windows Vista Community. The question you have posted is related to Windows XP in a domain environment, and would be better suited to the TechNet community. Please visit the link below to find a community that will provide the support you want.
    http://social.technet.Microsoft.com/forums/en-us/itproxpsp/threads

  • Integration of Cisco ACS and Cisco NAC Manager - downloadable ACLs

    Hello

    I have Setup Cisco NAC in my environment. These are all works well. The users themselves will get authenticated via Cisco NAC Manager. The Cisco NAC Manager meets with Cisco ACS for the part of the user database. These are all works well. I would like to activate downloadable ACLs. I tried to use the CISCO-AV-PAIR method and creating a downloadable ACL entry in the shared components, but nothing works. It's either I'm doing wrong or this configuration of the mine does not support downloadable ACLs? Please advice kindly.

    Kind regards

    RAM

    + 6 012-2918870

    Hello

    It is not possible.

    You cannot push the ACL in the NAC manager.

    If you make the Radius of NAC authentication manager, you can do is create roles the NAC Manager, and on the roles you define traffic strategies.

    Using the Radius attributes you can then map users to roles.

    Please, take a look at this:

    http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_auth.html#wp1158789.

    HTH,

    Tiago

    --

    If this helps you or answers to your question if it you please mark it as 'responded' or write it down, if other users can easily find it.

  • Mutual authentication failed. The server password is obsolete on the domain controller.

    Hello
    I have configured the application WebDev and it mapped as network location.
    But while accessing it, I got following error: "the location is not available. Mutual authentication failed. The server password is obsolete on the domain controller. »
    Can someone help me solve this problem?

    Hi chahima,

    The question you posted would be better suited to Windows 7 IT pro community.
    http://social.technet.Microsoft.com/forums/en-us/w7itpronetworking/threads

  • [Cisco ACS] 11036 the RADIUS Message Authenticator attribute is invalid

    Hello

    I had a lot of Cisco AP related to Cisco WLC 2.

    On each WLC, I configured a primary and a secondary RADIUS server.

    RADIUS servers are Cisco ACS 5.2.0.26 (patch 10)

    ACS primary and secondary configurations are synchronized.

    There is no problem between primary rules WLC and Cisco ACS (primary and secondary).

    When secondary WLC asks primary Cisco ACS, I get this error "11036 the RADIUS Message Authenticator attribute is not valid.

    WLC secondary contacts automatically secondary Cisco ACS and it works fine.

    Cisco ACS description for this error: "this can be reason of mismatched shared Secrets."

    The two Cisco ACS are synchronized, so I should have the same error on them...

    Why primary ACS generates this error?

    Thanks for your help,

    Patrick

    Patrick: The shared secret mismatch could be on the side WLC, not on the side of the ACS.

    Make sure that the shared secret of the radius primary server is configured correctly on the secondary WLC.

    HTH

    Amjad

    Rating of useful answers is more useful to say "thank you".

  • Install VMware vSphere Client on the domain controller computer

    Hi team,

    How to install VMware vSphere Client on the domain controller computer? Can someone guide me?

    Thank you

    John

    Please follow this link:

    http://www.vmwarearena.com/2015/01/how-to-install-vSphere-client-on-domain-controller-machine.html

    Thank you

    Venance

  • A way to resolve the domain controller Adobe Acrobat Reader to open with the right hand "Interface" in the closed position - really annoying to have to close ALL THE TIME.

    A way to resolve the domain controller Adobe Acrobat Reader to open with the right hand "Interface" in the closed position - really annoying to have to close ALL THE TIME.

    Read this:

    https://forums.Adobe.com/thread/1817184?start=120&TSTART=0

  • Problem with Cisco ACS and different areas

    Hello

    We are conducting currently a problem with Cisco ACS that we put in place, and I'll try to describe:

    We have ACS related directory AD areas, where we have 2 domains and appropriate group mappings.

    Then we have our Cisco switches with the following configuration,

    AAA new-model

    AAA-authentication failure message ^ CCCC

    Failled to authenticate!

    Please IT networks Contact Group for more information.

    ^ C

    AAA authentication login default group Ganymede + local

    AAA authorization exec default group Ganymede + local

    AAA authorization network default group Ganymede + local

    AAA accounting exec default start-stop Ganymede group.

    orders accounting AAA 15 by default start-stop Ganymede group.

    !

    AAA - the id of the joint session

    But the problem is that with the users in a domain, we can authenticate, but not the other. Basically, the question is that when we check on the past of authentication, two authentications are passage and the display of 'Authentic OK', but on the side of the switch, there is a power failure.

    There may be something wrong with the ACS?

    Thank you

    Jorge

    Try increasing the timeout on IOS device using radius-server timeout 10.

    Do we not have journaling enabled on the ACS server remotely?

    -Philou

  • Migration of the domain controller Active Directory of windows 2000 server to a Server 2008.

    I have an old machine that is running Windows 2000 server and it's our only one domain controller in a mixed 2000/2003/2008 server environment. I would like to move to one of the servers 2008 Active Directory and make the PDC and withdraw from the old box of 2000.

    I saw a sea of documentation about the updated/move ActiveDirectory, but no clear examples of what I need to accomplish.

    Can I do a dcpromo on a 2003 server, synchronization of the 2000 box, retire the 2000 Server, then dcpromo th 2008 Server 2003 Server? I know this may seem simplistic to a complicated procedure, but I have not really found anything to support...

    A simple link to a procedure taken care of step by step would be great.

    Thanks for all the ideas in advance.
    Mike

    The Forum Windows Server would be the appropriate forum for your inquiry.

  • How to force the domain controller to accept the new PDC after the orphaned domain controller

    Hey guys, have a pretty complex but simple problem.

    I had a my student domain PDC holder down. He worked to RID and infrastructure

    I was able to grasp the roles to another domain controller, so this new domain controller, allows the appeal is that DC1 is now PDC.

    However, I can't convince the other DC, such as DC2 and DC3, to make it the new pdc.

    When I run the netdom query I get

    * WARNING role owner is a deleted domain controller: CN = NTDS settings\OADEL etc.

    So actually, he knows that his pdc has been removed from metadata. Where is this hard information coded in adsi edit, and where I can edit to type the host name of the new pdc?

    Hello

    The Microsoft Answers community focuses on the context of use. Please reach out to the business community of COMPUTING in the TechNet forum below:

    http://social.technet.Microsoft.com/forums/en/category/w7itpro

Maybe you are looking for

  • HP Elite 8200 MEI Driver

    Hi all I have a new HP 8200 elite. I install a new image with Windows 7 Pro x 64 and I have installed all the drivers I found on HP.com. But I still have 2 drivers to the unknown. I found that both are in the " technology of Directors Active Intel (r

  • Trial Microsoft Azure - charged but without active subscription

    I was charged $2, but it says that I don't have an active subscription help

  • compilation error

    Hello when I try to compile my code it gives me the compile error! I've seen this page http://digital.NI.com/public.nsf/allkb/311C18E2D635FA338625714700664816 and I tried a lot to adapt to my code! reduced use of the lut of 107 to 101%, but he actual

  • Circles/light spots on the pictures

    Hi, I'm relatively new to photography and my Canon T5.  How can I avoid these reflections/circles that I receive when taking sunsets or pictures of the moon. I tried focusing not directly at the light source, but did not help.

  • print spooler stopped

    Shutdown abnormally and now take print spooler stop.  I restart the spooler, but it stops again.  How can I fix it?  I should point out that I tried to uninstalled/reinstalled the HP printer, what has not worked.  I also tried to use Microsoft FIX it