Enterprise-Level Policies

Enterprise-level policies are network-wide policies, and apply to traffic sent across any QoS ACS-managed subnet. This container holds two predefined policies:

1. Any Authenticated User: This policy is applied to all authenticated users in the domain. An authenticated user is any user logged on to a domain account with a valid user identity and password for that domain. It is recommended that this policy be customized with your common enterprise QoS parameters, and that it only define additional Enterprise policies if particular users have special requirements. These exception policies need only specify attributes that must be different from the default policy. The exception policy and default policy are aggregated when a user makes a bandwidth request.
2. Unauthenticated User: This policy is applied when an unauthenticated user makes a priority bandwidth request. This is useful for controlling the traffic of users who access the network but are not authenticated by a trusted Windows 2000 domain. An unauthenticated user is any user who is not logged on under a domain account but is connected to the network. For example, if you log on to a computer as a local user, the QoS ACS considers you unauthenticated because you are not logged on to a domain.

The values in the predefined Enterprise policies are listed in Table 9.8.

Table 9.8 Default Enterprise-Level Policy Values

Enterprise policies apply to all subnets unless the user also has a subnet-level policy. For example, if User A has a policy in the Enterprise container and a policy in the Subnet container for traffic on Subnet A, the Enterprise policy applies unless User A sends or receives data on Subnet A—then the Subnet policy applies.

© 1985-2000 Microsoft Corporation. All rights reserved.