Limiting Access

  • Thread starter Thread starter PJ
  • Start date Start date
P

PJ

Can someone tell me the easiest way to setup a limit on
dial-up access? I have users that stay dialed in for
long periods of time who run high phone bills and limit
other users access.
 
Can someone tell me the easiest way to setup a limit on
dial-up access? I have users that stay dialed in for
long periods of time who run high phone bills and limit
other users access.

In Win2000+ RRAS policies can do this.

Build various user groups for each type of access and
add the appropriate users.

For each distinct timeout etc you wish to control, build
a corresponding RRAS Policy (near the bottom of the
RRAS manager for a server)

Set each policy to match on "Windows Group" that
corresponds to the users.

Each RRAS "Policy" has an ASSOCIATED "Profile"
(the policy and profile are tied together) that you can
reach by viewing Policy properties and using the "Edit
Profile" button -- on the main dialog sheet are the timeouts
both for max call and max idle time, and other stuff.

Note: If some users are in more than one Group, e.g.,
Administrators and Users, be sure to put the most important
distinctions FIRST -- RRAS policies are matched from the
TOP down so first one that matches is used and the other
policies are NEVER seen for those users.

You can even have a policy that let's people stay on a LONG
TIME late at night and not during peak hours -- put the "late
night" policy at the top in this example or as appropriate.

Note, if NO POLICY matches (there is a default policy that
matches everything so be careful about deleting it) then NO
ACCESS is the effective setting.

Generally you should either remove the default "all hours/everyone
can access" or place it at the bottom since it ALWAYS matches
and would take precedence over any later policy.
 
Back
Top