Hi Laura, Thanks so much for the response. It's kind of odd actually. I did as Tony suggested and made the adjustment so I could delegate read and write privileges for msNPAllowDialin. Once I did this, this definitely made the Remote Access Permission portion under the Dial-in tab "ungrayed" I guess you could say. However when changes are made, and you attempt to save those changes by hitting OK/Apply, I get an error that, "Dial-in profile changes were not saved because: Access is Denied."
I'll continue looking for an answer in the display specifiers whitepaper and hope it has an answer for me, although I haven't had any real luck so far. Thanks, ~Ben -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Laura A. Robinson Sent: Thursday, November 30, 2006 1:09 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Delegate VPN rights Thank you! I've been giving myself a headache trying to remember the name of the file! I couldn't remember the extension. That said, Ben, still take a look at the display specifiers whitepaper; not all attributes display names match the actual attribute names. I've not checked the one in question. Laura > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray > Sent: Thursday, November 30, 2006 2:50 PM > To: ActiveDir@mail.activedir.org > Subject: Re: [ActiveDir] Delegate VPN rights > > You will need to modify dssec.dat to expose the property. > > http://www.activedir.org/article.aspx?aid=24#11 > > Tony > ---------- Original Message ---------------------------------- > From: "WATSON, BEN" <[EMAIL PROTECTED]> > Reply-To: ActiveDir@mail.activedir.org > Date: Thu, 30 Nov 2006 09:34:39 -0800 > > I'm attempting to delegate out the permissions to adjust the > Remote Access Permissions under the Dial-In tab in Active > Directory for user accounts. When performing an LDAP query, > I notice that changes to this setting are recorded in the > msNPAllowDialin attribute. Set to False when Deny Access is > set, True when Allow Access is set, and "not set" > when Control Access through Remote Access Policy is set. > > > > However when I attempt to delegate out the rights to a > security group so they can modify this, it is not listed as a > selectable property. Am I missing something here? Should I > be looking for a different property to delegate out this right? > > > > Thanks, > > ~Ben Watson > > > > > > > > > ________________________________________________________________ > Sent via the WebMail system at mail.activedir.org > > > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir@mail.activedir.org/ > > -- > No virus found in this incoming message. > Checked by AVG Free Edition. > Version: 7.5.430 / Virus Database: 268.15.2/559 - Release > Date: 11/30/2006 5:07 AM > > -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.430 / Virus Database: 268.15.2/559 - Release Date: 11/30/2006 5:07 AM List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
