Help the NAC OOB Windows SSO

We have just upgraded to Windows 2003 AD to Win2k8 R2 and Single Sign it has stopped working. Authentication works very well, but the NAC agent does not use the Windows credentails. Users must enter their user name and password manually.

The AD server is a new server but has the same IP addresses as the old man. I'm running the CAM/CASE 4.7.2.

Gregg

Gregg,

2 k 8 does not by default, so I suspect that is where it's a failure. Please look at the following sections and rerun ktpass (on a new user preference) as shown in the link:

http://www.Cisco.com/en/us/docs/security/NAC/appliance/configuration_guide/47/CAs/s_adsso.html#wp1257882

HTH,

Faisal

--

If you find this article useful, please note so that others can easily find the answer

Tags: Cisco Security

Similar Questions

  • NAC OOB AD SSO

    Hello

    I am configuring SSO OOB of the NAC with AD. The software on my CASE and the CAM is 4.7 (2)

    and my ad is Windows Server 2008.

    I have some information I must not run ktpass with this version of the software of the NAC (4.7.2)

    on the AD server. Is this true? Because I found this kind of information in any textbook.

    So I run the ktpass, and if I do, what version should I use?

    Thank you

    Zoran,

    Check out this link. Even though it says it's for 4.8, he works with 4.7.2 also:

    http://www.Cisco.com/en/us/docs/security/NAC/appliance/configuration_guide/48/CAs/s_adsso.html#wp1300720

    HTH,

    Faisal

  • The NAC - OOB L2 authentication login page - does not appear!

    Hi all

    We have 2 managers of the NAC and NAC 2 servers. We have a failover solution. Our deployment is OOB layer 2 virtual Central Passage. We have successfully added the SIN in NAM and we did the requirements in NAM as a mapping setup VLAN (starting at vlan no reliable 913 to the vlan trust 910), adding managed subnet, change profile, profile, adding switches (cisco 3560) to NAM, the roles configuration on the user, the local users and also port user login page.
    Then, we tested it by connecting the PC to port controlled on the switch.
    The controlled port configuration was VLAN 910 and after connecting the PC, it is converted to 913 VLAN then we have successfully obtained an IP address from dhcp that is configured on the switch but the authentication login page appeared! and also, when disconnect us from the PC of this port, the configuration is not passed to vlan 913 to vlan 910 then manually change each time to do our tests.

    Do so that the login page appears and also automatically NAM to change the configuration of the port after having disconnected from the PC?

    Thanks in advance.

    AD SSO is supported with the Windows 2003, but with 2008, only single server is supported and which should also be 32-bit. 64-bit servers are not yet supported.

    HTH,

    Faisal

  • helps the performance of Windows 7 x 64 on uefi file system

    Hey readers, so I have a laptop of hp basic model 3125 and want to install win 7 x 64 in the filesystem uefi to have connectivity ipv6 Butler don't know how make my usb appears in the Boot Manager menu while off legacy, as well as the boot of security, need help thing!
    Thankx for yo the time and consideration!

    Hi @Worm12316

    Your HP 3125 basic model is a commercial product, and to get your question more than exhibition, I would post in the trade forums. Here is a link to the forum Commercial Notebook.

  • Publish the upgrade from Windows 7 to Windows 10

    Original title: W7 Pro to W10

    My laptop with W7pro was debited with the message "getting setup files" now at 18hrs.  Is there a download method alternative other than the offer of upgrade/updates?

    Hello

    Thanks for posting your query on the Microsoft Community.

    Alternatively, you can upgrade your current PC to Windows 10 by going to the Windows 10 software download page to download the tool of creation of media. The media authoring tool can be used to create a USB or DVD media to upgrade your current PC to Windows 10 or install Windows 10 on another PC.

    Follow the instructions on the download page of Windows 10 software: http://www.microsoft.com/software-download/windows10

    Note:

    When upgrading to Windows 10 using media, you must run setup.exe from in your version of Windows 7 or Windows 8 and authentic. If you want to boot from media, you must have upgraded to Windows 10 previously. Boot 10 Windows media directly without upgrading to Windows 10 previously is not supported and will have problems with activation.

    Additional information:

    Helps the upgrade to Windows 10

    Hope this information is useful. Let us know if you need more help, we will be happy to help you.

  • Problem of the NAC in the virtual tape gateway VPN SSO

    Hello

    I've implemented a NAC solution for remote users. The unit of CASE mode configured in the gateway enVirtual Strip.

    I followed all the steps listed in http://www.cisco.com/en/US/products/ps6128/products_configuration_example09186a008074d641.shtml

    Remote users can connect succeffuly using the cisco vpn software and they can ping the SIN, but not the DNS (the ASA offers IP @ but not the DNS I do not know why).

    When I access the NAS, I can download the NAC Agent but VPN SSO is not executed and the Agent asks me to connect using LOCAL DB.

    Any help please,.

    Kind regards

    Larson,

    For VPN SSO work, you must send the accounting package to the CAs. The CASE can in turn send for the ACS if you need accounting also be done on GBA, but for authentication ONLY work, the accountant must reach the CASE.

    HTH,

    Faisal

  • With the help of VISA with Windows 7 64-bit resource control

    Hello.

    My company has recently upgraded our laptops, and I now work on Windows 7 64 bit rather than Windows XP 32 - bit.  I reinstalled a bunch of basic LabVIEW 2009, hoping that the 64-bit Windows 7 operating system would be able to handle 32-bit LabVIEW 2009 without problems.  But trying to run our test system, the control of VISA resources does not work.

    We use it to get a list of the COM (RS232) ports on the computer.  But the list is now empty.  The only option that appears in the list, is the text "Refresh."  But nothing happens when I press it.  Is this a bug in LabVIEW?  I installed the latest patch that I found, so now I'm under LabVIEW v9.0f3 (32 bit).

    Many thanks for any help!

    LabVIEW SP1 has an x 64 native installer.  I'm running very well with drivers 64-bit on this disc.  I think that the later will have something to do with your problem.  See the com ports in MAX?

  • I received an error code 800b0100 update. I just installed windows 7 student disc and my computer guard stop. I me trying to get the updates that might help the closing of the bottom.

    I received an error code 800b0100 update. I just installed windows 7 student disc and my computer guard stop. I me trying to get the updates that might help the closing of the bottom.

    Hi Happyrockgeek,

    Welcome to Microsoft Windows 7 answers Forum!

    This problem occurs if the Windows security .dll files are incorrectly registered.

    To resolve this problem, you can perform the two methods of troubleshooting, check if the problem is resolved.
    Method 1:
    Run (Checksur.exe) system update readiness tool.
    To do this, follow these steps:
    1. download and run the system update readiness tool. This tool runs an ad hoc analysis of inconsistencies that might prevent future maintenance operations. For more information about how to download and run the Checksur.exe tool, click on the number below to view the article in the Microsoft Knowledge Base:
    http://support.Microsoft.com/default.aspx/KB/947821
    2. try to install the updates again.
     
    Methods 2.
    Reset the Windows Update components.
    1. to reset the Windows Update components automatically, click the fix button in the link below.
    http://support.Microsoft.com/kb/971058 
    2. click run in the file download dialog box and follow the steps described in the fix it Wizard.

    I also suggest you to install the latest version of Windows Installer 4.5.
    Follow the link below to download:
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=5A58B56F-60B6-4412-95B9-54D056D6F9F4&displaylang=en
    and you can also try to install after you turn off the firewall.
     
     
    It will be useful.
     
    Thank you, and in what concerns:
    Shekhar S - Microsoft technical support.

    Visit our Microsoft answers feedback Forum.

  • I can't install the update of Windows KB951847x86. Any help on this? Thank you.. .ragtopkid

    I can't install the update of Windows KB951847x86. Any help on this?     Thanks... tagtopkid

    ragtopkid,
    Take a look at this article as it addresses the issue.
    Mike - Engineer Support Microsoft Answers
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • I have the same problem - a code error 80070643. Can anyone help. I use Windows 7 and Microsoft 2010 (trial version)

    Can anyone help. I use Windows 7 and Microsoft 2010 (trial version).

    Hi DonDonaldo,

    1. what windows update did you install?

    2. When was the last time you were able to install updates?

    3. do you have security software installed on the computer?

    Windows Update error80070643 can happen for several reasons. The most common cause is a problem with the .NET Framework is installed on the computer. You can also encounter this error when installing updates for Microsoft Office 2003.

    If you were installing Microsoft Office 2003 updates when you received the error, follow the instructions in the "Microsoft Office 2003" section below. Otherwise, follow the instructions in the section "Windows.NET Framework".

    The .NET framework is a component of Windows that is used to build, deploy, and run programs and applications. Unfortunately, it may be damaged by some programs, viruses or hard drive problems.

    To automatically repair the .NET Framework

    1. click on this link:repair .NET Framework

    2. in thefile download dialog box, click run, and then follow the steps in the wizard.

    3. open Windows Update by clickingStart , all programsand then clickWindows Update.

    4. in the left pane, clickcheck for updates, and then wait while Windows searches the latest updates for your computer.

    5. If updates are found, clickinstall updates. If you are prompted for an administrator password or a confirmation, type the password or provide confirmation.

    If the previous steps do not solve the problem, you can reinstall .NET Framework manually, but the steps are intended for advanced users. If you are not comfortable performing these steps, ask a friend to help you. You will find the steps in the article toreinstall .NET Framework on the Microsoft Web site.

     

    Microsoft Office 2003

    To resolve this problem, you may need to restart the Office Source Engine (OSE) service and try again to install the latest updates for Office products.

    To restart the Office Source Engine (OSE) service

    You must be logged on as administrator to perform these steps.

    1 open administrative tools by clicking theStart button, click Control Panel, clicking system and Maintenance, and then clicking Administrative Tools.

    2. double-click onServices. If you are prompted for an administrator password or a confirmation, type the password or provide confirmation.

    3. If theOffice Source Engine service is disabled, double-click it to open the service properties.

    4. click on the listStartup type , click Automatic (delayed start), and then clickapply.

    5. underService status, click Start.

    Windows Update error 80070643

    http://Windows.Microsoft.com/en-us/Windows-Vista/Windows-Update-error-80070643

    You receive an "Error 80070643" error message when you try to update Office 2003 by using Software Update Services

    http://support.Microsoft.com/kb/903772

    I hope this helps!

    Halima S - Microsoft technical support.

    Visit ourMicrosoft answers feedback Forum and let us know what you think.

  • Code 80072EE2 error when I try to update the update for Windows Vista (KB972145) tried to install on a week help someone?

    Code 80072EE2 error when I try to update the update for Windows Vista (KB972145) tried to install on a week help someone?

    sweetcheeks,

    0x80072EE2 ERROR_INTERNET_TIMEOUT http://support.microsoft.com/kb/836941/en-us

  • HELP ME PLEASE! Several problems after the installation of Windows 7.

    Freezing programs, icons changed, customization does not work, on the taskbar icons are invisible. What can I do to fix these problems? For example when I click on firefox or IE, it is just thinking about and begins to (almost) never, or if I click with the right button on the icon and select anything on the list it is just there and and think. All my icons are similar to a piece of paper on my desk instead of recycle bin icon or the icon of firefox. When I right click on my desktop to change background it justs sits there and think and if TI dioes works all photos are empty. If you click on a paper painted it does not appear, but you don't see what you are clicking on just the title of the wallpaper. Just like my pictures if you consider them the sticker, they are virgins but if you click on the image that they invent it and you can see, please help...

    Windows Update has nothing to with the upgrade of Windows. Please repost your question in the support forum: http://social.answers.microsoft.com/Forums/en-US/w7install/threads
    ~ Robear Dyer (PA Bear) ~ MS MVP (that is to say, mail, security, Windows & Update Services) since 2002 ~ WARNING: MS MVPs represent or work for Microsoft

  • Need help in activating the copy of Windows

    Original title: G ' Day, Ref. - Activation.

    G ' Day,.

    REF - Activation.

    Recently, my office computer is turned off for a few days.
    When started again, a pop-up window has advised that the computer should be
    activated within 3 days, because a significant detected Microsoft program
    changes made to the computer.
    The OS is windows XP, SP2.
    The computer has never been connected to the internet and has never been
    infected by bad guys.

    NOTE: there were NO hardware changes or software on this computer.
    Note: this computer has been properly registered and activated when built a few years ago.
    Note: the great inconvenience will be caused to me this computer should be stopped.

    Q1 - why did this request to activate?
    Q2 - what will happen if this request to reactivate is ignored?
    Q3 - What Microsoft suggest is done now?

    Please answer emergency email.

    See you soon,.
    Stuart.

    Don't know what is causing the problem, but you should be able to re - activate by phone.

    How to contact a Microsoft Product Activation Center:
    http://support.Microsoft.com/default.aspx/KB/950929/en=us

    Microsoft Activation centers worldwide telephone numbers:
    http://www.Microsoft.com/licensing/existing-customers/activation-centers.aspx
    (This site is for activating Volume License, but if you call, they will help you)

    The phone number is not working:
    Microsoft Wordwide contacts: http://www.microsoft.com/worldwide/default.aspx

    Once Windows activated / Genuine Advantage Notifications:
    http://www.Microsoft.com/downloads/en/details.aspx?displaylang=en&FamilyID=afd45b36-3d77-4259-801c-d31a9a90cdcf
    (This tool will confirm that the copy of Windows installed on your PC is genuine and authorized)

    J W Stuart: http://www.pagestart.com

  • need help with the computer 'See' the disc into the cd in windows xp

    When I try to read a cd or dvd (did not use this material in a year) my computer don't "see" the disc. I used to have a pop-up window asking me 'what do you do with that?' this window no longer displayed. I tried microsoft 'Fix - it', he says that the cd/dvd is working correctly; a clean boot, has not helped either. Have not reinstalled the driver... ideas?

    Hi Apollo,

    Welcome to the Microsoft Community Forums.

    According to the description, it seems that you are havin problems with playback option Autoplay not activated during playback of CD/DVD. I'll be happy to help you with this problem.

    AutoPlay lets you choose which program to use for different types of digital media, such as CDs of music or photos from your digital camera.

    -Did you do changes on the computer before this problem?

    I suggest you to follow the steps from the link and check if the problem persists.

    The Autorun feature or the AutoPlay feature does not work when you insert a CD-ROM into the CD drive

    http://support.Microsoft.com/kb/330135

    To do: Important this section, method, or task contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click on the number below to view the article in the Microsoft Knowledge Base:

    322756 (http://support.microsoft.com/kb/322756/)

    How to back up and restore the registry in Windows

    I hope this helps. Try the above steps and get back to us for assistance. We will be happy to help you.

  • Need help with the transfer of windows XP partition.

    I have a new laptop (running xp prof 32-bit). My U/S laptop (abandoned on a trip) has a larger size hard drive but windows is corrupted and messy. Can I format the biggest hard drive (after retrieving all the data on my desktop pc I did) and then clone/transfer the windows of the most recent laptop hd partition so I can then share on hard drives for the new laptop so I have more memory? I need HELP! Thank you very much.

    I have a new laptop (running xp prof 32-bit). My U/S laptop (abandoned on a trip) has a larger size hard drive but windows is corrupted and messy. Can I format the biggest hard drive (after retrieving all the data on my desktop pc I did) and then clone/transfer the windows of the most recent laptop hd partition so I can then share on hard drives for the new laptop so I have more memory? I need HELP! Thank you very much.

    It is unlikely that it will work; because the material is different, there are differences in what is needed in the installations of Windows... At the very least, you will need to do a repair installation after the fact. The repair facility is not enough and you need to clean install Windows.

Maybe you are looking for