Export (0) Print
Expand All
This topic has not yet been rated - Rate this topic

FPCUserMapping

Internet Security and Acceleration Server 2004/2006 SDK

The FPCUserMapping object represents the user mapping that is used to map VPN clients connecting with an ISA Server computer using a non-Windows authentication method (RADIUS authentication) to mirrored Active Directory accounts in the Windows namespace. The Domain property of the FPCUserMapping object specifies a domain name that ISA Server can combine with a user name in the user mapping process when the user name supplied does not contain a domain name. As a result, access rules that specify user sets containing Windows users and groups are also applied to non-Windows authenticated users that do not use Windows.

When RADIUS authentication with the Challenge Handshake Authentication Protocol (CHAP), the Microsoft Challenge Handshake Authentication Protocol version 1 (MS-CHAP), the Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAP v2), or any type of the Extensible Authentication Protocol (EAP) is used, the domain specified in the user mapping is used to match the VPN client to a mirrored Active Directory account if the user mapping is enabled. When the Password Authentication Protocol (PAP) or the Shiva Password Authentication Protocol (SPAP) is used, the domain name is always ignored, the VPN client can be matched to an Active Directory account in the local domain if the ISA Server computer belongs to a domain or to a local user account on the ISA Server computer if the ISA Server computer belongs to a workgroup.

The user mapping can be used only when the ISA Server computer belongs to a domain. It should not be enabled in a workgroup environment if CHAP, MS-CHAP, MS-CHAP v2, or EAP is enabled.

The FPCUserMapping object can be accessed through the RADIUSUserMapping property of the FPCVpnConfiguration object.

Click here to see the ISA Server object hierarchy.

Methods

The FPCUserMapping object defines the following methods.

Method Description
Refresh Reads the values of all of the object's properties from persistent storage, discarding any changes that have not been saved.
Save Writes the current values of all of the object's properties to persistent storage.

Properties

The FPCUserMapping object has the following properties.

Property Description
Domain Gets or sets the domain name that ISA Server can combine with a user name in the user mapping process when the user name supplied does not contain a domain name.
Enabled Gets or sets a Boolean value that indicates whether the user mapping is enabled.

Interfaces for C++ Programming

This object implements the IFPCUserMapping interface.

Requirements

Client Requires Windows XP.
Server Requires Windows Server 2003. Requires Windows Server 2003 or Windows 2000 for ISA Server 2004 Standard Edition.
Version Requires Internet Security and Acceleration (ISA) Server 2006 or ISA Server 2004.
IDL

Declared in Msfpccom.idl.

See Also

COM Objects

Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft. All rights reserved.