• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 267
  • Last Modified:

Changing a default setting for creating a new user

When creating a new user in Active Directory users and Computer the Dial-in tab defaults to the following setting:
"Control access through Remote Access Policy", is there a way to have the default set to "Deny Access"?

0
dmknoll
Asked:
dmknoll
  • 5
  • 3
  • 2
1 Solution
 
itcozaCommented:
Hi,  Your domain has been uplifted to Native mode and this is why your setting is defaulting as above.
0
 
itcozaCommented:
The setting is as good as setting access deny unless you have a policy that will allow access to your network via dial-up or VPN.

Regards,
M
0
 
dmknollAuthor Commented:
we do use the policy for certain users, I need to change the default for when our 2nd level techs create a new user that this is not set as a default.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
itcozaCommented:
Your default policy should remain in place as a deny policy.  Create a new policy that allows users access.  Then no users that are not described by the allow policy will have access.
0
 
dmknollAuthor Commented:
I just tested the setting and it allows me to to dial-in?
0
 
CharliePete00Commented:
Create template accounts with the appropriate settings based on user role and keep those account disabled.  Have your down-level admins copy the template accounts when adding users to the domain instead of creating accounts from scratch.  This will help eliminate alot misconfiguration (as long as they use the correct template)
0
 
dmknollAuthor Commented:
So, back to my original question, can you change the default setting to "Access Denied"
0
 
CharliePete00Commented:
No...but you can create a template account with it set to access denied and when your down-level admins copy the template when adding accounts the new account will also be set to access denied.  When you create templates you load them up with all of the comapany, depatment, and role-based default setting and make them members of all of the default groups.  Then when you copy the template account the new account already has the default setting for the company, department, role and is a member of the default groups
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

  • 5
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now