Solved

Changing a default setting for creating a new user

Posted on 2006-06-28
12
244 Views
Last Modified: 2010-04-18
When creating a new user in Active Directory users and Computer the Dial-in tab defaults to the following setting:
"Control access through Remote Access Policy", is there a way to have the default set to "Deny Access"?

0
Comment
Question by:dmknoll
  • 5
  • 3
  • 2
12 Comments
 
LVL 13

Expert Comment

by:itcoza
ID: 17001617
Hi,  Your domain has been uplifted to Native mode and this is why your setting is defaulting as above.
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17001630
The setting is as good as setting access deny unless you have a policy that will allow access to your network via dial-up or VPN.

Regards,
M
0
 

Author Comment

by:dmknoll
ID: 17001650
we do use the policy for certain users, I need to change the default for when our 2nd level techs create a new user that this is not set as a default.
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 13

Expert Comment

by:itcoza
ID: 17001735
Your default policy should remain in place as a deny policy.  Create a new policy that allows users access.  Then no users that are not described by the allow policy will have access.
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17001740
0
 
LVL 13

Expert Comment

by:itcoza
ID: 17001751
0
 

Author Comment

by:dmknoll
ID: 17001945
I just tested the setting and it allows me to to dial-in?
0
 
LVL 7

Expert Comment

by:CharliePete00
ID: 17001998
Create template accounts with the appropriate settings based on user role and keep those account disabled.  Have your down-level admins copy the template accounts when adding users to the domain instead of creating accounts from scratch.  This will help eliminate alot misconfiguration (as long as they use the correct template)
0
 

Author Comment

by:dmknoll
ID: 17002946
So, back to my original question, can you change the default setting to "Access Denied"
0
 
LVL 7

Accepted Solution

by:
CharliePete00 earned 125 total points
ID: 17003221
No...but you can create a template account with it set to access denied and when your down-level admins copy the template when adding accounts the new account will also be set to access denied.  When you create templates you load them up with all of the comapany, depatment, and role-based default setting and make them members of all of the default groups.  Then when you copy the template account the new account already has the default setting for the company, department, role and is a member of the default groups
0

Featured Post

Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
change home folder path 4 56
AD user acount change history 4 71
Unexpected Windows system folders on D drive 16 88
Downgrade From Domain to WorkGroup 3 60
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question