11-11
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Chapter 11 Working with User Databases
Windows NT/2000 User Database
Windows Dial-up Networking Clients without a Domain Field
If users access your network using the dial-up networking client provided with
Windows 95, Windows 98, Windows ME, or Windows XP Home, two fields
appear:
•
username—Type your username.
Note
You can also prefix your username with the name of the domain you
want to log in to. For more information about the implications of
prefixing or not prefixing the domain name before the username, see
Windows Authentication, page 11-11
.
•
password—Type your password.
Windows Authentication
While different versions of Windows provide different methods of specifying a
domain name, the effect of providing or not providing the domain name while
logging in is the same. The most reliable method of authenticating users against
a specific domain is to require users to submit the domains they should be
authenticated against along with their usernames.
With the dial-up networking client provided with Windows NT, Windows 2000,
and Windows XP Professional, submitting a domain name is accomplished by
typing the domain name in the domain field (or selecting it from the drop-down
list). With the dial-up networking client provided with Windows 95, Windows 98,
Windows ME, and Windows XP Home, this is accomplished by submitting the
username in the fully qualified format. Users submitting a fully qualified
username must enter the domain name before their username in the following
format:
DOMAIN_NAME\USER_NAME
For example, user Mary Smith (msmith) in Domain10 would enter the following:
Domain10\msmith
Another reason to provide the username in the format shown above is if a user is
included in more than one domain. In this case, the privileges assigned upon
authentication will be those associated with the account in the first domain with a
