You can't really modify those settings very well with any LDAP based tools. The reason is that MS in their infinite wisdom carried the userParameters attribute over from Windows NT and that is the attribute that holds all of the TS info. Unfortunately it is one big binary blob. Doing binary with LDAP is messy to start with, doing TS attributes in that blob is worse because I don't believe the format of that blob is publicly documented. So if you are copying an identical blob to every account, that is doable, but if you have to pick and choose what is set/changed, you won't be doing it with LDAP.
 
Check out
 
http://www.winnetmag.com/WindowsScripting/Article/ArticleID/42736/42736.html
 
and
 
http://www.winnetmag.com/WindowsScripting/Article/ArticleID/26365/26365.html
 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jordan, Jason [EPM/AUS]
Sent: Wednesday, October 27, 2004 3:46 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Modifying Terminal Services Settings En Masse

Well, I have a few questions that I think this group should be able to answer without breaking a sweat.
 
I need to write a script that can modify 2 particular settings for all users in a particular OU.  The settings I need to modify are the Terminal Services User Profile and Terminal Services Home Folder.  I am planning on using LDIFDE or CSVDE to make the modification.  I would like to set both of these settings for all users to \\SERVER\SHARE\DIRECTORY\%USERNAME%  Once these are set by the script, I will have to open each user and close them so that the Terminal Services Home Folder gets created on the share with the right permissions.
 
So here are my questions:
1.  What is the AD/LDAP name for the Terminal Services User Profile and Terminal Services Home Folder setting?
2.  Is there a better way than LDIFDE or CSVDE to make the modification?
3.  Is there a better way than opening and closing each user to get the home folder created and permissions updated?
 
Thanks in advance for all of your help.

jasonjordan MCSE, MCP+I, MCP
Sr. SQL DBA/Windows Network Administrator
Emerson Process Management, LLLP, Austin Data Center
(512) 832-3191

 

Reply via email to