Article ID: 911083
Article Last Modified on 11/1/2006
APPLIES TO
- Microsoft Windows Code Name “Longhorn”
Beta Information
This article discusses a Beta release of a Microsoft product. The information in this article is provided as-is and is subject to change without notice.
No formal product support is available from Microsoft for this Beta product. For information about how to obtain support for a Beta release, see the documentation that is included with the Beta product files, or check the Web location where you downloaded the release.
SYMPTOMS
You are running Microsoft Internet Authentication Service (IAS) on a computer that is running the Microsoft Windows Server Code Name "Longhorn" operating system. In IAS, the remote access policy has a Generate-Class-Attribute attribute to control whether IAS generates the class attribute in the Access-Accept packet or not. However, the connection request policy in IAS does not include the Generate-Class-Attribute attribute. Therefore, the connection request policy cannot control whether IAS generates the class attribute or not.
If you use the Accept users without validating credentials authentication method in the connection request policy, IAS bypasses the remote access policy. In this case, IAS always generates the value for the class attribute. If you use an extension DLL to generate a customized class attribute, two class attributes may be generated. However, you do not want IAS to generate another class attribute.
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
MORE INFORMATION
For more information, click the following article number to view the article in the Microsoft Knowledge Base:
905596 FIX: The Connection Request Policy Wizard does not display the "Generate-Class-Attribute" attribute on a computer that is running Windows Server 2003
Keywords: kbtshoot kbprb KB911083
