Configure attribute manipulation

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To configure attribute manipulation

Open Internet Authentication Service.
In the console tree, click Connection Request Policies.

Where?
- Internet Authentication Service (Local)/Connection Request Processing/Connection Request Policies
In the details pane, right-click the policy that you want to configure, and then click Properties.
Click Edit Profile.
On the Attribute tab, specify find and replace rules for RADIUS attributes.

Caution

Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on your computer.

Notes

To open Internet Authentication Service, click Start, click Control Panel, double-click Administrative Tools, and then double-click Internet Authentication Service.
When the user name does not contain a domain name, IAS supplies one. By default, the domain name supplied is that of which the IAS server is a member. You can specify this domain name through the following registry setting:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasMan\PPP\ControlProtocols\BuiltIn\DefaultDomain
Some third party network access servers delete or modify the domain name as specified by the user. As the result, the network access request is authenticated against the default domain, which might not be the domain for the user's account. To resolve this problem, configure your RADIUS servers to change the user name into the correct format with the accurate domain name.

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.