Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » RE: msNPAllowDialIn and delegwiz.inf
RE: msNPAllowDialIn and delegwiz.inf [message #157009] Mon, 29 June 2009 06:10 Go to next message
PeterABergerJr  is currently offline PeterABergerJr
Messages: 3
Registered: July 2009
Junior Member
I too am having issues per the suggestions above.
I am trying to delegate the "Dial-in" tab options to my Helpdesk AD group.
I've followed the following directions (pasted below), but I cannot get the
options to un-grey. I've manually sync'ed AD and copied the DSSEC.DAT file to
all 3 DC's and the XP desktop itself. All attempts have failed.

Am I missing something?

What I did so far:
1. Open C:\windows\system32\DSSEC.DAT with NotePad.
2. Under [USER] section, find the following entries and change the value
from "7" to "0".

msNPAllowDialin=0
msNPCallingStationID=0
msNPSavedCallingStationID=0
msRADIUSCallbackNumber=0
msRADIUSFramedIPAddress=0
msRADIUSFramedRoute=0
msRADIUSServiceType=0
msRASSavedCallbackNumber=0
msRASSavedFramedIPAddress=0
msRASSavedFramedRoute=0

3. Open ADUC, click Action menu, choose the Delegation Wizard, and select
the group you want to delegate control, click next.
4. Create a custom task to delegate.
5. Select "Only the following objects in the folder", choose User objects
at the bottom of the list, and click next.
6. Select Property-specific, give read and write permissions to these
attributes.

Account Restrictions
Remote Access information
msNPAllowDialin
msNPCallingStationID
msNPSavedCallingStationID
msRASSavedCallbackNumber
msRASSavedFramedIPAddress
msRASSavedFramedRoute
RE: msNPAllowDialIn and delegwiz.inf [message #157292 is a reply to message #157009] Sun, 05 July 2009 17:13 Go to previous messageGo to next message
Hamish  is currently offline Hamish
Messages: 3
Registered: July 2009
Junior Member
I've alos tried this with no success, although I've change it on a Windows
2008 Server that's a member of the domain and not a DC. Guessing this
shouldn't matter as the inf and dat file are only used to give you the
ability to pass this info onto the DC's anyway to set the required
permissions.
Basically the service desk guys I'm trying to delegate the rights to can
"see" the tab name, but get an the dreaded "Could not load the dial-in
profile for this user because: Access is denied." The environment we are
running is native 2008 AD.

Any help would be appreciated!
RE: msNPAllowDialIn and delegwiz.inf [message #159217 is a reply to message #157009] Mon, 27 July 2009 07:51 Go to previous message
PeterABergerJr  is currently offline PeterABergerJr
Messages: 3
Registered: July 2009
Junior Member
Posting this to keep the thread active.
did some google'ing of the Internet and haven't found anything else about
this topic. These are the best answers thus far.
Previous Topic:¦¦???¦¦Hollywood hot actress Angelina jolie hot videos, Don’t miss¦¦???¦¦
Next Topic:ADAM Authentication
Goto Forum:
  


Current Time: Tue Jan 23 16:47:21 MST 2018

Total time taken to generate the page: 0.05265 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software