Enabling / disabling active directory users

[Alan DeKok]

Iain Grant wrote:
> We have on site a Windows 2008 RC2 domain controller ( 64-bit ) which I
> have a linux based freeradius server hanging from.
> 
> My question is, other than changing the users file on the freeradius
> server, is there another way of disabling a user from authentication
> through the radius server but still allow them access via the active
> directory route.

  Sure.  Put them into a "non-radius" group in LDAP.  Then, check the
group, and reject them if they're in the group.

  Alan DeKok.