IDM and "default" vlan

[Stefano_Colombo]

I've a question on how to configure IDM/IAS to obtain the following result.

We have set up IDM/IAS in a customer installation to put autheticated users in the correct VLAN based on their group membership .

This works fine .

Now the two problems are :

- Since the customer has to configure all the ports of  all the switches to be port authenticator , and cannot find which ports the computers are connected to , it faces the problem of devices as printers and other peripherals which cannot authenticate .
 How can we deal with it ? is there a way to "default" to a particular vlan for "unauthenticated" devices ?

- I noticed that if an AD group is removed from the list of group being synchronized that group is not removed from IDM is that correct ?

thanks

SC