You could write a script to go through all the accounts in AD and check for a "true" value for "msNPAllowDialIn". If you are not a scripter, there are a lot of examples out there about making a VBScript that parses through user accounts; just modify it to look for this value.
-----Original Message----- From: Eric Brouwer [mailto:[email protected]] Sent: Thursday, June 16, 2011 10:30 AM To: NT System Admin Issues Subject: Determine who has VPN access? Greetings! I have a Windows 2003 Server configured for VPN access. Is there a way to determine what users/groups have the Dial-In/VPN right outside of going through each user in Active Directory? Thank you, Eric ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
