Quantcast
Channel: Directory Services forum
Viewing all articles
Browse latest Browse all 31638

dial-in tab greyed out in active directory users and computers

$
0
0
I am trying to delegate the "Dial-in" tab options to my Helpdesk AD group. I've followed the following directions (pasted below), but I cannot get the options to un-grey. I've manually sync'ed AD and copied the DSSEC.DAT file to all 3 DC's and the XP desktop itself. All attempts have failed.

Am I missing something?

What I did so far:
1. Open C:\windows\system32\DSSEC.DAT with NotePad.
2. Under [USER] section, find the following entries and change the value
from "7" to "0".

msNPAllowDialin=0
msNPCallingStationID=0
msNPSavedCallingStationID=0
msRADIUSCallbackNumber=0
msRADIUSFramedIPAddress=0
msRADIUSFramedRoute=0
msRADIUSServiceType=0
msRASSavedCallbackNumber=0
msRASSavedFramedIPAddress=0
msRASSavedFramedRoute=0

3. Open ADUC, click Action menu, choose the Delegation Wizard, and select
the group you want to delegate control, click next.
4. Create a custom task to delegate.
5. Select "Only the following objects in the folder", choose User objects
at the bottom of the list, and click next.
6. Select Property-specific, give read and write permissions to these
attributes.

Account Restrictions
Remote Access information
msNPAllowDialin
msNPCallingStationID
msNPSavedCallingStationID
msRASSavedCallbackNumber
msRASSavedFramedIPAddress
msRASSavedFramedRoute

Peter A. Berger Jr.

Viewing all articles
Browse latest Browse all 31638

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>