| Sam Salhi [MSFT] 2005-01-08, 8:47 pm |
| You don't need to add users to a specific group to authenticate them
successfully
All you need is to have your users either be allowed dial in permissions or
controlled by remote access policies (from the dial in tab on the user
object in AD, the default in Native mode domains). This will ensure your
users are allowed access
The group assignment is designed to control access conditionally. Or in
other words: Allow you to match a policy based on group membership. It's not
there to allow or deny access (but effectively if you add that as a
condition and the user doesn't match it or any other policy he is rejected)
Hope this helps
--
========================================
=====
This posting is provided "AS IS" with no warranties, and confers no rights
========================================
=====
"Jeff Thornburg" <jeff.thornburg@cpcc.edu> wrote in message
news:142101c4f356$dfe6fa10$a501280a@phx.gbl...
>I have a need to allow all users in a domain to
> authenticate through IAS Remote Access Policy. Can I
> assign an OU or domain to the Remote Access Policy
> instead of a group? I'm trying to eliminate the overhead
> of adding each new user to the specific group
>
> Thanks for your assistance,
>
> Jeff.
|