Thanks, Brendan, but I had already looked at that property with ADSIEdit, and it does 
not at all seem to correspond with the "Allow logon to terminal server" check box.  In 
other words, if an account DOES have this checked and can use terminal services, and I 
look at it with ADSIEdit, the terminalServer attribute shows <not set>.  Clearing or 
checking the box on a given user account does NOT change the value of the 
terminalServer attribute (at least as shown by ADSIEdit).

The task is to report all users who have permissions to log on to terminal server, so 
querying that does not seem to help.

Dave

-----Original Message-----
From: Stephens, Brendan [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 01, 2002 10:15 AM
To: ''[EMAIL PROTECTED]' '
Subject: RE: [ActiveDir] Allow logon to terminal server property


 
There is an optional termialServer adsi property with a True/False or
True/Null value that can be set.

The Null value simply means that the property has not been set (the same as
false).

Updating this property will allow or deny Terminal service access.
-----Original Message-----
From: Parker, Edward
To: '[EMAIL PROTECTED]'
Sent: 5/1/2002 9:09 AM
Subject: RE: [ActiveDir] Allow logon to terminal server property

Here is a good website for that information, however it appears that
info is
kept in the "User Parameters" Field.  This would make it difficult to
query
update this attribute.

http://home.apu.edu/~captin/ldap/software/activedirectory/attributes/pro
pert
ies/general.php
-----Original Message-----
From: Fugleberg, David A [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, April 30, 2002 9:51 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Allow logon to terminal server property

I've been asked to determine which users have the "allow logon to
terminal
server" box checked in the 'Terminal Services Profile' page of their
properties.  I'd like to write a script to find out, but I have not been
able to figure our which attribute holds that information.  Any ideas ?

Dave
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to