Hi,

I'm trying to find all the users in AD that have Dial-in Access. However I need to use the "Control Access through Remote Access Policy" option as a lookup. So something like:

where obj=user and AND msNPAccessDialin = TRUE type thing. I have the follow code but it doesn't work for what I'm looking for. Can any help me with a mod please?

Const ADS_SCOPE_SUBTREE = 2

Dim Fso :Set Fso = CreateObject("Scripting.FileSystemObject")

Set objConnection = CreateObject("ADODB.Connection")
Set objCommand =   CreateObject("ADODB.Command")
objConnection.Provider = "ADsDSOObject"
objConnection.Open "Active Directory Provider"
Set objCommand.ActiveConnection = objConnection

objCommand.Properties("Page Size") = 1000
objCommand.Properties("Searchscope") = ADS_SCOPE_SUBTREE 

objCommand.CommandText = _
	"SELECT Name FROM 'LDAP://dc=domain,dc=com' WHERE objectCategory='user' " & _
		"AND msNPAccessDialin = TRUE"
Set objRecordSet = objCommand.Execute

Dim Ts

  Set Ts = Fso.CreateTextFile("Text_Report.txt")

   Ts.WriteLine Now

   objRecordSet.MoveFirst

	Do Until objRecordSet.EOF

	 Ts.WriteLine objRecordSet.Fields("Name").Value

	 Wscript.Echo objRecordSet.Fields("Name").Value

	 objRecordSet.MoveNext
	Loop
  Ts.Close

Edited October 20, 200916 yr by bbbngowc

If Remote Access Permission (Dial-in or VPN) Allow Access is selected then msNPAllowDialin is TRUE

If Remote Access Permission (Dial-in or VPN) Deny Access is selected then msNPAllowDialin is FALSE

If Remote Access Permission (Dial-in or VPN) Control Access through Remote Access Policy is selected then msNPAllowDialin has no value.

Therefore try changing the line to say:

WHERE objectCategory='user' " & _
		"AND msNPAllowDialin <> '*'"

If Remote Access Permission (Dial-in or VPN) Allow Access is selected then msNPAllowDialin is TRUE

If Remote Access Permission (Dial-in or VPN) Deny Access is selected then msNPAllowDialin is FALSE

If Remote Access Permission (Dial-in or VPN) Control Access through Remote Access Policy is selected then msNPAllowDialin has no value.

Therefore try changing the line to say:

WHERE objectCategory='user' " & _
		"AND msNPAllowDialin <> '*'"

Thanks. This worked.