Cisco ASA Series User Manual

1-31
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Connection Profiles, Group Policies, and Users
Configuring Connection Profiles
Figure 1-3 Active Directory—Maximum Password Age
Note The radius-with-expiry command, formerly configured as part of tunnel-group remote-access
configuration to perform the password age function, is deprecated. The password-management
command, entered in tunnel-group general-attributes mode, replaces it.
Using Active Directory to Override an Account Disabled AAA Indicator
To override an account-disabled indication from a AAA server, use the override-account-disable
command in tunnel-group general-attributes configuration mode on the ASA and perform the following
steps under Active Directory.
Note Allowing override account-disabled is a potential security risk.
Step 1 Select Start > Programs > Administrative Tools > Active Directory Users and Computers.
Step 2 Right-click Username > Properties > Account and select Disable Account from the menu.

Cisco ASA Series Specifications

General

Brand	Cisco
Model	ASA Series
Category	Network Hardware
Language	English