Bulk Change User Setting

[bmdixon]

Hello,
I'm trying to change the "Remote Access Permission" (in the Dial-in tab) on over 700 users. I've searched around the net for a script or program that will let me do it but i can't find anything that works! Closest i've come is using Wisesoft Password Control but i can't find where the bulk change settings bit is!
Any help would be gratefully received.
Thanks!

[jsnetman]

Admodify is a very useful for modifying bulk users attributes. Can be download here: Admodify - Download Microsofts's Windows Active Directory

[BKGarry]

I user AD modify.net some thing diff name
ADModify.NET - Home

It is great and has an Undo Function

Gaz

[bmdixon]

thanks
that looks pretty good but it doesn't seem to actually change the setting! It says that it has but when i check the settings on users it is still denied....

[jsnetman]

Not sure why it is not modifying, a guess is that you are not logged in with sufficient rights to modify AD.

[tmcd35]

Hello,
I'm trying to change the "Remote Access Permission" (in the Dial-in tab) on over 700 users. I've searched around the net for a script or program that will let me do it but i can't find anything that works! Closest i've come is using Wisesoft Password Control but i can't find where the bulk change settings bit is!
Any help would be gratefully received.
Thanks!

Wisesoft, AFAIK, have two versions - Password Control, and Bulk Password Control.

I have 'Bulk Password Control' on my servers desktop here, very useful! You need to choose 'Get Users' from the 'File' menu in import (normally from OU) the users you want to apply the bulk changes to. There is then a 'Modify Attributes' button. If you click this after getting users, you can select 'Dial In' Tab and change the permissions you need.

When you hit 'OK' the program will change the permissions for all the users you specified.

[User3204]

If you have the users within the same OU, you can select multiple users and change their settings in the normal AD DSA.msc plugin.

[timbo343]

Try activeman.exe.. its free which is this

Mikey Magic's Web Site - Active User Manager for Windows 2000 & 2003 Active Directory (AD)

[bmdixon]

Try activeman.exe.. its free which is this

Mikey Magic's Web Site - Active User Manager for Windows 2000 & 2003 Active Directory (AD)

Thanks but that doesn't seem to allow the changing of that setting. Looks like i'll have to do it manually
Thanks to all who have suggested things

[SYNACK]

If you have the users within the same OU, you can select multiple users and change their settings in the normal AD DSA.msc plugin.

I agree, just bring up each OU full of users in Active Directory Users and Computers, select them all and go into properties. You should be able to check the correct checkbox in there and have it applied to all of the users that you have selected.

You may have to do it once for each OU of users but it is certainly faster than doing it one by one.

[bmdixon]

I agree, just bring up each OU full of users in Active Directory Users and Computers, select them all and go into properties. You should be able to check the correct checkbox in there and have it applied to all of the users that you have selected.

You may have to do it once for each OU of users but it is certainly faster than doing it one by one.

You can't set this setting that way though. I have done that for other settings but the "dial-in" tab only appears on an individual user.

[Mr_Glass]

I have a simple script that changes an AD attribute for all the users in a specified OU. You could use that to change the setting, PM me and i'll email it over to you.

[SYNACK]

You can't set this setting that way though. I have done that for other settings but the "dial-in" tab only appears on an individual user.

Ah, my bad. It is irritating how some setting show up in that multi-set format and others don't.

[bmdixon]

sorry to bump this to the top again, but i've finally discovered why it wasn't working.

The domain functional level needs to be raised to "windows server 2003". Once that had replicated to our other DC's we were then able to change the Dial In permissions.
ADModify worked brilliantly once we'd done this.