Hey Rita,

If your user base is XP based there is a solution that can take care of
the IP refresh without giving users much access.
This can be done using Group Policies.

For Win2K, this will require opening access to a larger base as the
Network Configuration Operators group was introduced only from XP and
2000 does not have this

-Prem

-----Original Message-----
From: Cisco Clean Access Users and Administrators
[mailto:[log in to unmask]] On Behalf Of Rita Williams
Sent: Thursday, February 08, 2007 12:21 PM
To: [log in to unmask]
Subject: IP Fails to Refresh/Renew to Authenticated VLAN

Hi,

CCA is not deployed in our environment yet partly because in testing
user
 
roles, if a user logs in with anything other than admin or power user
rights, we are getting restricted access errors and the IP fails to
refresh/renew to the correct VLAN after authentication.  This is also a 

problem if the user tries to install the agent.  

I realize this is a group policy problem within Windows but just want to


find out how others got around the issue without giving the user too
much
 
access.

Thanks.

Rita Williams
[log in to unmask]