Re: Global modification of user accounts

Tech-Archive recommends: Speed Up your PC by fixing your registry

William Mann wrote:

We've installed an Aruba wireless access system, that uses IAS to
authenticate users on their laptops. We have 1700 accounts, and need to
change the remote access permission from deny to control though remote
access
policy. I've looked at scripting this, but dsmod doesn't seem to have
provision for this.

Any ideas?

The msNPAllowDialin attribute of the user object controls this. If the value
is True, dialin is allowed (Dialin tab of user properties in ADUC). If the
value is False, dialin is not allowed. If msNPAllowDialin has no value, then
"Control access through Remote Access Policy" is selected.

Info from ScriptCenter on how to query for this is linked here:

http://www.microsoft.com/technet/scriptcenter/resources/qanda/aug05/hey0825.mspx

They recommend you not alter the RAS attributes directly, but use RAS
administration functions. Documentation for this is very poor. And, I've had
success modifying this attribute. You might be able to use a command line
tool to clear this attribute for users.

--
Richard Mueller
Microsoft MVP Scripting and ADSI
Hilltop Lab - http://www.rlmueller.net
--


.

Relevant Pages

  • Re: lighting---hacked!
    ... > I figure that if I turn off all remote access to my firewall, ... > running a private subnet with masquerading and ... > source routed packets are rejected everywhere. ... more control over things - it's a question of balancing the control ...
    (comp.os.linux.security)
  • Re: lighting---hacked!
    ... > I figure that if I turn off all remote access to my firewall, ... > running a private subnet with masquerading and ... > source routed packets are rejected everywhere. ... more control over things - it's a question of balancing the control ...
    (comp.os.linux.security)
  • event manager security URGENT PLEASE HELP HELP HELP
    ... it speaks of remote access and security levels, ... control this access. ... >>perform a system restore or reinstall. ...
    (microsoft.public.security)
  • Re: Dial-in Permissions, who has them?
    ... I don't know of a GUI off hand. ... Windows Group setting in the specify conditions to match section of Remote Access ... You can then control membership to that group to only have those allowed to ...
    (microsoft.public.win2000.security)
  • Re: Windows XP Pro VPN and NetGear
    ... Have you tried starting and stopping the Remote Access Connection ... This is typically the cause of client problems, ... >The Routing and Remote Access service was successfully sent a start control. ... >The IPX Traffic Forwarder Driver service was successfully sent a start control. ...
    (microsoft.public.windowsxp.work_remotely)