Solved

Export AD info showing accounts with Allow Access Dial-In enabled

Posted on 2010-11-30
5
1,258 Views
Last Modified: 2012-05-10
Is there a way to export a csv showing just the users that have AD accounts with Allow Access Dial-In enabled (VPN access)?

Windows Server 2003 AD...

Thx in advance.
0
Comment
Question by:OdyChris
  • 3
  • 2
5 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 34239859
Several good ways (I'm not at my lab so can't take a screenshot)

John outlines some methods here  http://www.windowsitpro.com/article/tips/jsi-tip-10596-more-ways-to-determine-who-has-dial-in-permission-in-my-domain-.aspx

I'm partial to the adfind tool from Joe Richards.   Try that out and let me know how that works.  In John's example he only outputted the DN but you can output any attributes you wish (i.e. samaccountname sn givenname etc...)

Thanks

Mike
0
 

Author Comment

by:OdyChris
ID: 34267815
Thanks for your help mkline... I have been trying to use the ADFIND program, I am just not having any luck with this... I dont think I know how to enter the right commands for this to work... Is there a forum somewhere that you could recommend that has help with using ADFIND? I know I know... Google is my friend :)

Thanks...
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 34267844
Joe used to have a forum but took it down.  I'll test tonight in my lab and get back with you.
0
 

Author Comment

by:OdyChris
ID: 34268060
That would be awesome, thank you for your help.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 34272592
I created two users that were set to allowed.  If you take a look at the screenshots you will see the command I'm using

adfind  -default -f "&(objectCategory=person)(objectClass=user)(msNPAllowDialin=TRUE)" samaccountname msnpallowdialin

Notice that the msNPAllowDialin=TRUE is case sensitive

in 2008 the text on the GUI changed (to network access permission)  You can see the differences (between 2003 and 2008) here  

http://www.selfadsi.org/user-attributes-w2k8.htm
http://www.selfadsi.org/user-attributes-w2k3.htm

Let me know if that helps

Thanks

Mike





Dialin-Query-ADUC.png
Dialin-Query.png
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Powershell Active Directory Attribute LVR Metadata 3 18
ACTIVE DIRECTORY, EXCHANGE 3 58
New Users Cannot Create Roaming Profile Folder 2 32
Powershell query 1 22
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question