Admodify is a very useful for modifying bulk users attributes. Can be download here: Admodify - Download Microsofts's Windows Active Directory
I'm trying to change the "Remote Access Permission" (in the Dial-in tab) on over 700 users. I've searched around the net for a script or program that will let me do it but i can't find anything that works! Closest i've come is using Wisesoft Password Control but i can't find where the bulk change settings bit is!
Any help would be gratefully received.
that looks pretty good but it doesn't seem to actually change the setting! It says that it has but when i check the settings on users it is still denied....
Not sure why it is not modifying, a guess is that you are not logged in with sufficient rights to modify AD.
I have 'Bulk Password Control' on my servers desktop here, very useful! You need to choose 'Get Users' from the 'File' menu in import (normally from OU) the users you want to apply the bulk changes to. There is then a 'Modify Attributes' button. If you click this after getting users, you can select 'Dial In' Tab and change the permissions you need.
When you hit 'OK' the program will change the permissions for all the users you specified.
If you have the users within the same OU, you can select multiple users and change their settings in the normal AD DSA.msc plugin.
You may have to do it once for each OU of users but it is certainly faster than doing it one by one.
I have a simple script that changes an AD attribute for all the users in a specified OU. You could use that to change the setting, PM me and i'll email it over to you.
sorry to bump this to the top again, but i've finally discovered why it wasn't working.
The domain functional level needs to be raised to "windows server 2003". Once that had replicated to our other DC's we were then able to change the Dial In permissions.
ADModify worked brilliantly once we'd done this.
There are currently 1 users browsing this thread. (0 members and 1 guests)