Hi,

I am having a problem with MS Radius and think that I have to do something
in AD to make things work. I have a few questions.

Can IAS work in mixed mode?

I am trying to configure the client and have set it to allow dial in access.
Do I have to change more items?

I am using chap, do I need the reverse password encryption changed?

I had this all working with W2K in an NT4 domain, but with this move to
active directory it broke and I am having problems trying to get it working.
I followed the instructions that Cisco had on their web site, but it did not
work with active directory, only a w2k3 server.

Thanks

Roger

"Roger" <rludwig@nospam.co.black-hawk.ia.us> wrote in
news:eRH4pDJ$DHA.2660@TK2MSFTNGP10.phx.gbl:

Yes, in mixed mode it works like it did in NT4; the dial-in right on the
user (or computer) object controls access along with the remote access
policy on the RADIUS (IAS) server. In native mode, the default is to
control access using only the remote access policy although you can still
use the dial-in right if needed.

Not that I know of.

Don't know. I can't recommend anyone use CHAP; MSCHAPv2 is more secure
and does not require reversable password encryption.

Hope that helps,

Wayne Tilton

Thanks for your reply as I was concerned whether this would work at all. I
did make a change to the registry and it allowed the connection to work.

Roger

"Wayne Tilton" <Wayne_Tilton@NoSpam.Yahoo.com> wrote in message
news:Xns949B9FE5EEBA4NWDCLMIT@207.46.248.16...