Re: Determine who has VPN access?

[Eric Brouwer]

Dude.  You are awesome!  Thanks so much for this.  HUGE help.

And thanks for the other feedback as well.  As always, much appreciated.

On Thu, Jun 16, 2011 at 11:05 AM, Mike Wiebke  wrote:
> You can do this with a saved query in ADUC.  Just create a new query and 
> select
> "Custom Search" for the query type.  Click on the Advanced tab and enter
> msNPAllowDialIn=TRUE for the query.  I think this is case sensitive .
>
> Mike W.
>
>
>
>
> - Original Message 
> From: Eric Brouwer 
> To: NT System Admin Issues 
> Sent: Thu, June 16, 2011 9:29:57 AM
> Subject: Determine who has VPN access?
>
> Greetings!
>
> I have a Windows 2003 Server configured for VPN access.  Is there a
> way to determine what users/groups have the Dial-In/VPN right outside
> of going through each user in Active Directory?
>
> Thank you,
>
> Eric
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Determine who has VPN access?

[Mike Wiebke]

You can do this with a saved query in ADUC.  Just create a new query and select 
"Custom Search" for the query type.  Click on the Advanced tab and enter 
msNPAllowDialIn=TRUE for the query.  I think this is case sensitive .

Mike W.




- Original Message 
From: Eric Brouwer 
To: NT System Admin Issues 
Sent: Thu, June 16, 2011 9:29:57 AM
Subject: Determine who has VPN access?

Greetings!

I have a Windows 2003 Server configured for VPN access.  Is there a
way to determine what users/groups have the Dial-In/VPN right outside
of going through each user in Active Directory?

Thank you,

Eric

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Determine who has VPN access?

[Charlie Kaiser]

Try this:
adfind -s subtree -f "msNPAllowDialIn=TRUE" username

note that the "TRUE" is case sensitive...

Don't have ADFind? Get it from joeware.net...

***
Charlie Kaiser
charl...@golden-eagle.org
Kingman, AZ
***  


> -Original Message-
> From: Eric Brouwer [mailto:ithelp.e...@gmail.com]
> Sent: Thursday, June 16, 2011 7:30 AM
> To: NT System Admin Issues
> Subject: Determine who has VPN access?
> 
> Greetings!
> 
> I have a Windows 2003 Server configured for VPN access.  Is there a
> way to determine what users/groups have the Dial-In/VPN right outside
> of going through each user in Active Directory?
> 
> Thank you,
> 
> Eric


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Determine who has VPN access?

[Mayo, Bill]

You could write a script to go through all the accounts in AD and check
for a "true" value for "msNPAllowDialIn".  If you are not a scripter,
there are a lot of examples out there about making a VBScript that
parses through user accounts; just modify it to look for this value.

-Original Message-
From: Eric Brouwer [mailto:ithelp.e...@gmail.com] 
Sent: Thursday, June 16, 2011 10:30 AM
To: NT System Admin Issues
Subject: Determine who has VPN access?

Greetings!

I have a Windows 2003 Server configured for VPN access.  Is there a
way to determine what users/groups have the Dial-In/VPN right outside
of going through each user in Active Directory?

Thank you,

Eric

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin