| Author | Messages | |
dharding
Posts:24
 | | 04/22/2008 3:50 PM |
| What are the minimum permissions required for a user to access the
Dial-in tab of an account in ADuC?
Devon Harding
Windows Systems Engineer
Southern Wine & Spirits - BSG
954-602-2469
This message is the property of Southern Wine & Spirits or its affiliates.
It is intended only for the use of the individual or entity to which it is addressed and
may contain information that is non-public, proprietary,
privileged, confidential, and exempt from disclosure under
applicable law or may constitute as attorney work product.
If you are not the intended recipient, you are hereby notified
that any use, dissemination, distribution, or copying of this
communication is strictly prohibited. If you have received this
communication in error, notify us immediately by telephone and
(i) destroy this message if a facsimile or (ii) delete this message
immediately if this is an electronic communication.
Thank you.
| | | |
| bsonposh
Posts:168
| | 04/22/2008 4:20 PM |
| Well.. Techinically all you need is access the the snap-in.
To get/set the info you need access to these properties.
Effectivily the msNP*, msRADIUS*, and msRAS*
msNPAllowDialin
msNPCallingStationID
msNPSavedCallingStationID
msRADIUSCallbackNumber
msRADIUSFramedIPAddress
msRADIUSServiceType
msRASSavedCallbackNumber
msRASSavedFramedIPAddress
Unknown Guy w/ Dean
On Tue, Apr 22, 2008 at 3:49 PM, Harding, Devon <dharding@southernwine.com>
wrote:
> What are the minimum permissions required for a user to access the
> Dial-in tab of an account in ADuC?
>
>
>
> *Devon Harding*
>
> *Windows Systems Engineer*
>
> *Southern Wine & Spirits - BSG*
>
> *954-602-2469*
>
>
>
> ------------------------------
> *This message is the property of Southern Wine & Spirits or its
> affiliates. It is intended only for the use of the individual or entity to
> which it is addressed and may contain information that is non-public,
> proprietary, privileged, confidential, and exempt from disclosure under
> applicable law or may constitute as attorney work product. If you are not
> the intended recipient, you are hereby notified that any use, dissemination,
> distribution, or copying of this communication is strictly prohibited. If
> you have received this communication in error, notify us immediately by
> telephone and (i) destroy this message if a facsimile or (ii) delete this
> message immediately if this is an electronic communication.
> Thank you.*
>
| | | |
| dharding
Posts:24
| | 04/22/2008 4:30 PM |
| I have a user that can see the tab, but its grayed out?
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: Tuesday, April 22, 2008 4:20 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Dial-in tab permissions
Well.. Techinically all you need is access the the snap-in.
To get/set the info you need access to these properties.
Effectivily the msNP*, msRADIUS*, and msRAS*
msNPAllowDialin
msNPCallingStationID
msNPSavedCallingStationID
msRADIUSCallbackNumber
msRADIUSFramedIPAddress
msRADIUSServiceType
msRASSavedCallbackNumber
msRASSavedFramedIPAddress
Unknown Guy w/ Dean
On Tue, Apr 22, 2008 at 3:49 PM, Harding, Devon
<dharding@southernwine.com> wrote:
What are the minimum permissions required for a user to access the
Dial-in tab of an account in ADuC?
Devon Harding
Windows Systems Engineer
Southern Wine & Spirits - BSG
954-602-2469
________________________________
This message is the property of Southern Wine & Spirits or its
affiliates. It is intended only for the use of the individual or entity
to which it is addressed and may contain information that is non-public,
proprietary, privileged, confidential, and exempt from disclosure under
applicable law or may constitute as attorney work product. If you are
not the intended recipient, you are hereby notified that any use,
dissemination, distribution, or copying of this communication is
strictly prohibited. If you have received this communication in error,
notify us immediately by telephone and (i) destroy this message if a
facsimile or (ii) delete this message immediately if this is an
electronic communication.
Thank you.
| | | |
| bsonposh
Posts:168
| | 04/22/2008 4:51 PM |
| I believe that is normal behavior... if you look through the greyness you
can see the values set.
Are you wanting the user to be able to define these?
On Tue, Apr 22, 2008 at 4:28 PM, Harding, Devon <dharding@southernwine.com>
wrote:
> I have a user that can see the tab, but its grayed out?
>
>
>
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Brandon Shell
> *Sent:* Tuesday, April 22, 2008 4:20 PM
> *To:* ActiveDir@mail.activedir.org
> *Subject:* Re: [ActiveDir] Dial-in tab permissions
>
>
>
> Well.. Techinically all you need is access the the snap-in.
>
>
>
> To get/set the info you need access to these properties.
>
>
>
> Effectivily the msNP*, msRADIUS*, and msRAS*
>
>
>
> msNPAllowDialin
> msNPCallingStationID
> msNPSavedCallingStationID
> msRADIUSCallbackNumber
>
> msRADIUSFramedIPAddress
> msRADIUSServiceType
> msRASSavedCallbackNumber
>
> msRASSavedFramedIPAddress
>
>
>
> Unknown Guy w/ Dean
>
> On Tue, Apr 22, 2008 at 3:49 PM, Harding, Devon <dharding@southernwine.com>
> wrote:
>
> What are the minimum permissions required for a user to access the Dial-in
> tab of an account in ADuC?
>
>
>
> *Devon Harding*
>
> *Windows Systems Engineer*
>
> *Southern Wine & Spirits - BSG*
>
> *954-602-2469*
>
>
>
>
> ------------------------------
>
> *This message is the property of Southern Wine & Spirits or its
> affiliates. It is intended only for the use of the individual or entity to
> which it is addressed and may contain information that is non-public,
> proprietary, privileged, confidential, and exempt from disclosure under
> applicable law or may constitute as attorney work product. If you are not
> the intended recipient, you are hereby notified that any use, dissemination,
> distribution, or copying of this communication is strictly prohibited. If
> you have received this communication in error, notify us immediately by
> telephone and (i) destroy this message if a facsimile or (ii) delete this
> message immediately if this is an electronic communication.
> Thank you.*
>
>
>
| | | |
| dharding
Posts:24
| | 04/22/2008 4:56 PM |
| Yes, but I would like that user to edit those settings without granting
domain admin permissions.
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: Tuesday, April 22, 2008 4:50 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Dial-in tab permissions
I believe that is normal behavior... if you look through the greyness
you can see the values set.
Are you wanting the user to be able to define these?
On Tue, Apr 22, 2008 at 4:28 PM, Harding, Devon
<dharding@southernwine.com> wrote:
I have a user that can see the tab, but its grayed out?
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: Tuesday, April 22, 2008 4:20 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Dial-in tab permissions
Well.. Techinically all you need is access the the snap-in.
To get/set the info you need access to these properties.
Effectivily the msNP*, msRADIUS*, and msRAS*
msNPAllowDialin
msNPCallingStationID
msNPSavedCallingStationID
msRADIUSCallbackNumber
msRADIUSFramedIPAddress
msRADIUSServiceType
msRASSavedCallbackNumber
msRASSavedFramedIPAddress
Unknown Guy w/ Dean
On Tue, Apr 22, 2008 at 3:49 PM, Harding, Devon
<dharding@southernwine.com> wrote:
What are the minimum permissions required for a user to access the
Dial-in tab of an account in ADuC?
Devon Harding
Windows Systems Engineer
Southern Wine & Spirits - BSG
954-602-2469
________________________________
This message is the property of Southern Wine & Spirits or its
affiliates. It is intended only for the use of the individual or entity
to which it is addressed and may contain information that is non-public,
proprietary, privileged, confidential, and exempt from disclosure under
applicable law or may constitute as attorney work product. If you are
not the intended recipient, you are hereby notified that any use,
dissemination, distribution, or copying of this communication is
strictly prohibited. If you have received this communication in error,
notify us immediately by telephone and (i) destroy this message if a
facsimile or (ii) delete this message immediately if this is an
electronic communication.
Thank you.
| | | |
| bsonposh
Posts:168
| | 04/22/2008 5:01 PM |
| You can give the user(s) access to the Properties via ADUC.
Depending if you just want one person or a group of persons to access one
account or group accounts this may be better served by delegation
There are permission on the Properties stored on each object.
Right Click User Object | Properties | Security | Advanced | click account
<edit> | Click Properties Tab... Assign away
I would start with
Read/Write Remote Access Information
Thanks!
Unknown Guy w/ Dean
On Tue, Apr 22, 2008 at 4:53 PM, Harding, Devon <dharding@southernwine.com>
wrote:
> Yes, but I would like that user to edit those settings without granting
> domain admin permissions.
>
>
>
>
>
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Brandon Shell
> *Sent:* Tuesday, April 22, 2008 4:50 PM
>
> *To:* ActiveDir@mail.activedir.org
> *Subject:* Re: [ActiveDir] Dial-in tab permissions
>
>
>
> I believe that is normal behavior... if you look through the greyness you
> can see the values set.
>
>
>
> Are you wanting the user to be able to define these?
>
> On Tue, Apr 22, 2008 at 4:28 PM, Harding, Devon <dharding@southernwine.com>
> wrote:
>
> I have a user that can see the tab, but its grayed out?
>
>
>
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Brandon Shell
> *Sent:* Tuesday, April 22, 2008 4:20 PM
> *To:* ActiveDir@mail.activedir.org
> *Subject:* Re: [ActiveDir] Dial-in tab permissions
>
>
>
> Well.. Techinically all you need is access the the snap-in.
>
>
>
> To get/set the info you need access to these properties.
>
>
>
> Effectivily the msNP*, msRADIUS*, and msRAS*
>
>
>
> msNPAllowDialin
> msNPCallingStationID
> msNPSavedCallingStationID
> msRADIUSCallbackNumber
>
> msRADIUSFramedIPAddress
> msRADIUSServiceType
> msRASSavedCallbackNumber
>
> msRASSavedFramedIPAddress
>
>
>
> Unknown Guy w/ Dean
>
> On Tue, Apr 22, 2008 at 3:49 PM, Harding, Devon <dharding@southernwine.com>
> wrote:
>
> What are the minimum permissions required for a user to access the Dial-in
> tab of an account in ADuC?
>
>
>
> *Devon Harding*
>
> *Windows Systems Engineer*
>
> *Southern Wine & Spirits - BSG*
>
> *954-602-2469*
>
>
>
>
> ------------------------------
>
> *This message is the property of Southern Wine & Spirits or its
> affiliates. It is intended only for the use of the individual or entity to
> which it is addressed and may contain information that is non-public,
> proprietary, privileged, confidential, and exempt from disclosure under
> applicable law or may constitute as attorney work product. If you are not
> the intended recipient, you are hereby notified that any use, dissemination,
> distribution, or copying of this communication is strictly prohibited. If
> you have received this communication in error, notify us immediately by
> telephone and (i) destroy this message if a facsimile or (ii) delete this
> message immediately if this is an electronic communication.
> Thank you.*
>
>
>
>
>
| | | |
|
|