I am trying to delegate the "Dial-in" tab options to my Helpdesk AD group. I've followed the following directions (pasted below), but I cannot get the options to un-grey. I've manually sync'ed AD and copied the DSSEC.DAT file to all 3 DC's and the XP desktop itself. All attempts have failed.
Am I missing something?
What I did so far:
1. Open C:\windows\system32\DSSEC.DAT with NotePad.
2. Under [USER] section, find the following entries and change the value
from "7" to "0".
msNPAllowDialin=0
msNPCallingStationID=0
msNPSavedCallingStationID=0
msRADIUSCallbackNumber=0
msRADIUSFramedIPAddress=0
msRADIUSFramedRoute=0
msRADIUSServiceType=0
msRASSavedCallbackNumber=0
msRASSavedFramedIPAddress=0
msRASSavedFramedRoute=0
3. Open ADUC, click Action menu, choose the Delegation Wizard, and select
the group you want to delegate control, click next.
4. Create a custom task to delegate.
5. Select "Only the following objects in the folder", choose User objects
at the bottom of the list, and click next.
6. Select Property-specific, give read and write permissions to these
attributes.
Account Restrictions
Remote Access information
msNPAllowDialin
msNPCallingStationID
msNPSavedCallingStationID
msRASSavedCallbackNumber
msRASSavedFramedIPAddress
msRASSavedFramedRoute
Peter A. Berger Jr.
Am I missing something?
What I did so far:
1. Open C:\windows\system32\DSSEC.DAT with NotePad.
2. Under [USER] section, find the following entries and change the value
from "7" to "0".
msNPAllowDialin=0
msNPCallingStationID=0
msNPSavedCallingStationID=0
msRADIUSCallbackNumber=0
msRADIUSFramedIPAddress=0
msRADIUSFramedRoute=0
msRADIUSServiceType=0
msRASSavedCallbackNumber=0
msRASSavedFramedIPAddress=0
msRASSavedFramedRoute=0
3. Open ADUC, click Action menu, choose the Delegation Wizard, and select
the group you want to delegate control, click next.
4. Create a custom task to delegate.
5. Select "Only the following objects in the folder", choose User objects
at the bottom of the list, and click next.
6. Select Property-specific, give read and write permissions to these
attributes.
Account Restrictions
Remote Access information
msNPAllowDialin
msNPCallingStationID
msNPSavedCallingStationID
msRASSavedCallbackNumber
msRASSavedFramedIPAddress
msRASSavedFramedRoute
Peter A. Berger Jr.