Looking at this attrib via ADSI Edit shows that msNPAllowDialin set to "True" is equiv. to "allow". "False" is equiv to "deny" and "<not set>" is "Control access through Remote Access Policy".
-Stuart -----Original Message----- From: Coleman, Hunter [mailto:[EMAIL PROTECTED] Sent: Thursday, December 18, 2003 11:52 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] attribute for remote access Mark- Here's a snippit of a script we use to check that: userADsPath = adoRecordset.Fields.Item("ADsPath").Value set objUser = GetObject(userADsPath) dialInEnabled = objUser.msNPAllowDialin Hunter ________________________________ From: Creamer, Mark [mailto:[EMAIL PROTECTED] Sent: Thursday, December 18, 2003 11:09 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] attribute for remote access Anyone know what schema attribute controls the remote access policy (has 3 choices, Allow, Deny or Control by Policy)? I'd like to query for the users with Allow enabled. Thanks! Mark Creamer Systems Engineer Cintas Corporation Honesty and Integrity in Everything We Do List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
