Remote Access Permissions

[Phil]

How can I find out or get a list of the domain users that
have Remote Access Permissions for dial-in and VPN
services?

 

[Ashok]

There are two levels of access checks done by the RRAS server.
1. Using lusrmgmt.msc, user can enable or disable dial-in to the server
2. RRAS may resrict user to dial-in using Ras access policies.

You can find scripts in script centre
(http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scriptce
nter/default.asp(go to users and group)),
to ennumarate all the user accounts and their
dial-in properties.

To check whether these users are restricted by the Ras polocy agent or not
using "netsh ras show user <user name> permit". you can find more info at
http://www.microsoft.com/technet/tr...wsserver2003/proddocs/entserver/netsh_ras.asp

--
Thanks
Ashok
(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no rights.