[ActiveDir] Delegation of Dial-In Tab???

2004-03-02 Thread Rakes, Brandon A. NMIMC Contractor
Title: Message









Calling any and all Delegation experts!

 

We have 2003 DC's and OU's setup for each of our
sites and have delegated out certain admin function to the local MID staff. Ex.
Create/Delete Users and Computers. They have full rights over the User object
within their OU but when they click on the Dial-In Tab they are getting access
denied. "Could not load the Dial-in profile for this user because: Access
is denied" 

 

I tried granting the following but it did not work:

 

RAS - Modify RAS permissions
(Native Mode)

 

Object Class: User

 

MsNPAllowDialin (Read, Write)

MsNPCallingStationID (Read, Write)

MsNPSavedCallingStationID (Read, Write)

MsRADIUSCallbackNumber (Read, Write)

MsRADIUSFramedIPAddress (Read, Write)

MsRADIUSFramedRoute (Read, Write)

MsRADIUSServiceType (Read, Write)

MsRSSSavedCallbackNumber (Read, Write)

MsRSSSavedFramedIPAddress (Read, Write)

MsRASSavedFramedRoute (Read, Write)

User - Parameters (Read, Write)

 

Thanks in Advanced,

Brandon








RE: [ActiveDir] Delegation of Dial-In Tab???

2004-03-02 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
Title: Message



 
this is a bug in Windows Server 2003 - the dial in tab is not available for non 
administrators (unrelated to the 
delegation of specific 
rights).  A Hotfix is available 
through PSS but not public yet.
/Guido


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Rakes, Brandon 
A. NMIMC ContractorSent: Dienstag, 2. März 2004 15:58To: 
'[EMAIL PROTECTED]'Subject: [ActiveDir] Delegation of 
Dial-In Tab???


Calling any and all Delegation 
experts!
 
We have 2003 DC's and OU's setup for 
each of our sites and have delegated out certain admin function to the local MID 
staff. Ex. Create/Delete Users and Computers. They have full rights over the 
User object within their OU but when they click on the Dial-In Tab they are 
getting access denied. "Could not load the Dial-in profile for this user 
because: Access is denied" 
 
I tried granting the following but 
it did not work:
 
RAS - Modify 
RAS permissions (Native 
Mode)
 
Object Class: User
 
MsNPAllowDialin (Read, 
Write)
MsNPCallingStationID (Read, 
Write)
MsNPSavedCallingStationID (Read, 
Write)
MsRADIUSCallbackNumber (Read, 
Write)
MsRADIUSFramedIPAddress (Read, 
Write)
MsRADIUSFramedRoute (Read, 
Write)
MsRADIUSServiceType (Read, 
Write)
MsRSSSavedCallbackNumber (Read, 
Write)
MsRSSSavedFramedIPAddress (Read, 
Write)
MsRASSavedFramedRoute (Read, 
Write)
User - Parameters (Read, 
Write)
 
Thanks in 
Advanced,
Brandon


RE: [ActiveDir] Delegation of Dial-In Tab???

2004-03-07 Thread Wright, T. MR NSSB
Title: Message








While we’re on the topic…  How
do I make this tab available to my OU Administrators in a Win2k SP4 domain? 
When their using ADUC they don’t even see the Dial-In tab?  Is the same
hotfix available for Win2k?  TIA.

 

-Tim

 









From:
GRILLENMEIER,GUIDO (HP-Germany,ex1) [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, March 02, 2004 12:10 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir]
Delegation of Dial-In Tab???



 

 

this is a bug in Windows Server
2003 - the dial in tab is not available for non administrators (unrelated
to the delegation of specific rights).  A Hotfix is available through PSS
but not public yet.

/Guido

 







From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rakes, Brandon A. NMIMC
Contractor
Sent: Dienstag, 2. März 2004 15:58
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Delegation of
Dial-In Tab???

Calling any and all Delegation experts!

 

We have 2003 DC's and OU's setup for each of our sites and
have delegated out certain admin function to the local MID staff. Ex.
Create/Delete Users and Computers. They have full rights over the User object
within their OU but when they click on the Dial-In Tab they are getting access
denied. "Could not load the Dial-in profile for this user because: Access
is denied" 

 

I tried granting the following but it did not work:

 

RAS - Modify RAS permissions (Native Mode)

 

Object Class: User

 

MsNPAllowDialin (Read, Write)

MsNPCallingStationID (Read, Write)

MsNPSavedCallingStationID (Read, Write)

MsRADIUSCallbackNumber (Read, Write)

MsRADIUSFramedIPAddress (Read, Write)

MsRADIUSFramedRoute (Read, Write)

MsRADIUSServiceType (Read, Write)

MsRSSSavedCallbackNumber (Read, Write)

MsRSSSavedFramedIPAddress (Read, Write)

MsRASSavedFramedRoute (Read, Write)

User - Parameters (Read, Write)

 

Thanks in Advanced,

Brandon








RE: [ActiveDir] Delegation of Dial-In Tab???

2004-03-07 Thread Rimmerman, Russ
Title: Message



Install the Win2k version of adminpak.msi and then install the Win2k3 
version over top of it.  Ignore any warnings you get.  That's how we 
got the dial-in tab to be there.

  -Original Message-From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]On Behalf Of Wright, T. MR 
  NSSBSent: Sunday, March 07, 2004 9:51 AMTo: 
  [EMAIL PROTECTED]Subject: RE: [ActiveDir] Delegation of 
  Dial-In Tab???
  
  While we're on the 
  topic...  How do I make this tab available to my OU Administrators in a 
  Win2k SP4 domain?  When their using ADUC they don't even see the Dial-In 
  tab?  Is the same hotfix available for Win2k?  
TIA.
   
  -Tim
   
  
  
  
  
  From: 
  GRILLENMEIER,GUIDO (HP-Germany,ex1) [mailto:[EMAIL PROTECTED] 
  Sent: Tuesday, March 02, 
  2004 12:10 PMTo: 
  [EMAIL PROTECTED]Subject: RE: [ActiveDir] Delegation of 
  Dial-In Tab???
   
   
  this is a bug in 
  Windows Server 2003 - the dial in tab is not available for non 
  administrators (unrelated to the delegation of specific rights).  A 
  Hotfix is available through PSS but not public yet.
  /Guido
   
  
  
  
  From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of Rakes, Brandon A. 
  NMIMC ContractorSent: 
  Dienstag, 2. März 2004 15:58To: 
  '[EMAIL PROTECTED]'Subject: [ActiveDir] Delegation of 
  Dial-In Tab???
  Calling any and all Delegation 
  experts!
   
  We have 2003 DC's and OU's setup 
  for each of our sites and have delegated out certain admin function to the 
  local MID staff. Ex. Create/Delete Users and Computers. They have full rights 
  over the User object within their OU but when they click on the Dial-In Tab 
  they are getting access denied. "Could not load the Dial-in profile for this 
  user because: Access is denied" 
   
  I tried granting the following but 
  it did not work:
   
  RAS - Modify RAS permissions 
  (Native Mode)
   
  Object Class: 
  User
   
  MsNPAllowDialin (Read, 
  Write)
  MsNPCallingStationID (Read, 
  Write)
  MsNPSavedCallingStationID (Read, 
  Write)
  MsRADIUSCallbackNumber (Read, 
  Write)
  MsRADIUSFramedIPAddress (Read, 
  Write)
  MsRADIUSFramedRoute (Read, 
  Write)
  MsRADIUSServiceType (Read, 
  Write)
  MsRSSSavedCallbackNumber (Read, 
  Write)
  MsRSSSavedFramedIPAddress (Read, 
  Write)
  MsRASSavedFramedRoute (Read, 
  Write)
  User - Parameters (Read, 
  Write)
   
  Thanks in 
  Advanced,
  Brandon

~~
This e-mail is confidential, may contain proprietary information
of the Cooper Cameron Corporation and its operating Divisions
and may be confidential or privileged.

This e-mail should be read, copied, disseminated and/or used only
by the addressee. If you have received this message in error please
delete it, together with any attachments, from your system.
~~