<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>Enabling / disabling active directory users</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">We have on site a Windows</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">2008</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">RC2 domain controller ( 64-bit ) which I have a</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">linux based</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">freeradius server hanging from.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">My question is, other than changing the users file on</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">the</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">freeradius</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri"> server</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">, is there another way of disabling a user from</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">authentication through the radius server but still allow them access via the active directory route.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">So for example, a user can log in quite happily on site using the</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">ir</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri"> windows machine.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">If they go offsite and try authentication via the radius server they will</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">not be allowed.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Does active directory have</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">a flag or something that can be set</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">against the user account</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">to deny access via a ra</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">dius link.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Thanks</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Iain</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"></SPAN></P>
<BR>
______________________________________________________<BR>
SCRI, Invergowrie, Dundee, DD2 5DA. <BR>
The Scottish Crop Research Institute is a charitable company limited by guarantee. <BR>
Registered in Scotland No: SC 29367.<BR>
Recognised by the Inland Revenue as a Scottish Charity No: SC 006662.<BR>
<BR>
<BR>
DISCLAIMER:<BR>
<BR>
This email is from the Scottish Crop Research Institute, but the views expressed by the sender are not necessarily the views of SCRI and its subsidiaries. This email and any files transmitted with it are confidential to the intended recipient at the e-mail address to which it has been addressed. It may not be disclosed or used by any other than that addressee.<BR>
If you are not the intended recipient you are requested to preserve this confidentiality and you must not use, disclose, copy, print or rely on this e-mail in any way. Please notify postmaster@scri.ac.uk quoting the name of the sender and delete the email from your system.<BR>
<BR>
Although SCRI has taken reasonable precautions to ensure no viruses are present in this email, neither the Institute nor the sender accepts any responsibility for any viruses, and it is your responsibility to scan the email and the attachments (if any).<BR>
______________________________________________________<BR>
</BODY>
</HTML>