Cisco Systems Servers Manuale Utente

Pagina di 654
Chapter 11      Working with User Databases
Windows NT/2000 User Database
11-10
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
About the Windows 95/98/Millennium Edition Dial-up Networking Client
If you use the Windows 95/98/ME Dial-Up Networking client to dial in to the 
AAA client, two fields appear:
username—Type your username.
Note
You also have the option of prefixing your username with the name of 
the domain you want to log in to. For more information about the 
implications of prefixing or not prefixing the domain name before the 
username, see the 
password—Type your password.
Windows NT/2000 Authentication
While the Windows NT/2000 and Windows 95/98/ME provide different methods 
of specifying a domain name, the effect of providing or not providing the domain 
name while logging in is the same.
The most reliable method of authenticating users against a specific domain is to 
require users to submit the domains they should be authenticated against along 
with their usernames. With the Windows NT/2000 dial-up client, this is 
accomplished by typing the domain in the domain field (or selecting it from the 
drop-down list). With the Windows 95/98/ME dial-up client, this is accomplished 
by submitting the username in the fully qualified format. Users submitting a fully 
qualified username must enter the domain name before their username in the 
following format:
DOMAIN_NAME\USER_NAME
For example, user Mary Smith (msmith) in Domain10 would enter the following:
Domain10\msmith
Another reason to provide the username in the format shown above is if a user is 
included in more than one domain. In this case, the privileges assigned upon 
authentication will be those associated with the account in the first domain with a