I must have assumed that whatever put the TRUE in my terminalServer optional properties, was the same for that interface checkbox... that'll teach me to try first.
Anyway, 15 Seconds says it's not possible, and perhaps that is why the new .Net server has the new "ADSI Extension for Terminal Services User Configuration", which has the object IADsTSUserEx which allows the method: AllowLogon Access: Read/write Data type: Long Value that specifies whether the user is allowed to log on to the Terminal Services server. The value is 1 if logon is allowed, and 0 if logon is not allowed. So, sorry for the mixup, and I don't trust the MSDN documentation too much anyway since it's full of oxy-moronic links and phrases like... logonHours is not an updateable property. use the iAdsUser interface to update this property. :? List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
