+ Post New Thread
Results 1 to 6 of 6
Windows Thread, Easy way to enable dialin access in AD in Technical; I now have my network VLANs working fine, with MAC based VLAN assignment. I have successfully created the 300 or ...
  1. #1

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,680
    Thank Post
    516
    Thanked 2,451 Times in 1,897 Posts
    Blog Entries
    24
    Rep Power
    832

    Easy way to enable dialin access in AD

    I now have my network VLANs working fine, with MAC based VLAN assignment. I have successfully created the 300 or so users in the AD which are checked against and VLANs assigned accordingly. However, all of these have their Remote Access Permissions set to 'Deny Access'.

    I've looked at vbscript and have come up short - does anyone know of a quick and easy way of scripting the enabling of access?

    I know I can likely do it in c# but don't want to go into so much hassle as to write an entire program just to do this... And I don't want to go clicking my way through the AD either.

    Ideas?

  2. #2
    Iain's Avatar
    Join Date
    Oct 2006
    Location
    Warwickshire
    Posts
    187
    Thank Post
    28
    Thanked 93 Times in 53 Posts
    Rep Power
    31

    Re: Easy way to enable dialin access in AD

    The Dial-in Remote Access Permission can be be set to allow or deny by setting the LDAP attribite msNPAllowDialin to TRUE or FALSE respectively in the user object.

    For example using vbscript:
    Code:
    Set objUser=GetObject("LDAP://<ldap path to user object>")
    objUser.Put "msNPAllowDialin", TRUE
    objUser.SetInfo
    Obviously you'll need to wrap that in code to iterate through the required users.

    Hope that is of some help,

    Iain.

  3. #3

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,680
    Thank Post
    516
    Thanked 2,451 Times in 1,897 Posts
    Blog Entries
    24
    Rep Power
    832

    Re: Easy way to enable dialin access in AD

    I'm afraid that hasn't worked. I've tried using that method, and the method described here: http://msdn2.microsoft.com/en-us/library/ms717026.aspx

    Your method simply adds an LDAP field but the AD seems to ignore this. The method described at the link seems to run, but doesn't make any difference...

  4. #4

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,680
    Thank Post
    516
    Thanked 2,451 Times in 1,897 Posts
    Blog Entries
    24
    Rep Power
    832

    Re: Easy way to enable dialin access in AD

    UPDATE: Well, it does seem to have worked actually... I checked directly on each AD server and none of them were reflecting any changes... but checking again now, they all are.

    So, patience was the key.

  5. #5
    Iain's Avatar
    Join Date
    Oct 2006
    Location
    Warwickshire
    Posts
    187
    Thank Post
    28
    Thanked 93 Times in 53 Posts
    Rep Power
    31

    Re: Easy way to enable dialin access in AD

    My guess it that you are working in a Win2K mixed mode domain, in which case you can't set this property via ADSI [see KB257341] A workaround seems to be available though: KB252398

    Iain

  6. #6

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,680
    Thank Post
    516
    Thanked 2,451 Times in 1,897 Posts
    Blog Entries
    24
    Rep Power
    832

    Re: Easy way to enable dialin access in AD

    I already spotted that and changed to a 2000 native domain instead. All is working fine now.

SHARE:
+ Post New Thread

Similar Threads

  1. Enable/Disable workstation internet access from shortcut
    By the_mighty_boosh in forum Netware
    Replies: 3
    Last Post: 28th January 2011, 09:34 AM
  2. Replies: 3
    Last Post: 11th July 2008, 09:45 AM
  3. How do you enable pop3 on exchange 2000?
    By nicholab in forum Windows
    Replies: 0
    Last Post: 16th July 2007, 11:40 AM
  4. Enable Search In Windows Explorer
    By DaveP in forum How do you do....it?
    Replies: 3
    Last Post: 22nd March 2007, 01:46 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •