Delegated change dial-in permissions

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

My company helpdesk users Terminal Service into a W2K Server and use an AD
snapin to reset passwords in a certain OU. I have now given them access to
change Dial-in permissions (Read/Write Remote Access information) and they
can view the Dial-in settings but cannot change them - the error they recieve
is "Dial-in profile changes were not saved because: Access is denied".

I have tried to replicate this in a test VM domain and was unable to.
Do these users require special permissions on the dial-in *.dll files or
something similar?

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Interesting, I'm trying to find out in my lab for you.

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips

"P.Walsh" <PWalsh@discussions.microsoft.com> skrev i meddelandet
news:50AC7596-67F0-4A2C-95E2-2FFF9AE88CB5@microsoft.com...
> My company helpdesk users Terminal Service into a W2K Server and use an AD
> snapin to reset passwords in a certain OU. I have now given them access
> to
> change Dial-in permissions (Read/Write Remote Access information) and they
> can view the Dial-in settings but cannot change them - the error they
> recieve
> is "Dial-in profile changes were not saved because: Access is denied".
>
> I have tried to replicate this in a test VM domain and was unable to.
> Do these users require special permissions on the dial-in *.dll files or
> something similar?

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Any update on this?

"Chriss3 [MVP]" wrote:

> Interesting, I'm trying to find out in my lab for you.
>
> --
> Regards
> Christoffer Andersson
> Microsoft MVP - Directory Services
>
> No email replies please - reply in the newsgroup
> ------------------------------------------------
> http://www.chrisse.se - Active Directory Tips
>
> "P.Walsh" <PWalsh@discussions.microsoft.com> skrev i meddelandet
> news:50AC7596-67F0-4A2C-95E2-2FFF9AE88CB5@microsoft.com...
> > My company helpdesk users Terminal Service into a W2K Server and use an AD
> > snapin to reset passwords in a certain OU. I have now given them access
> > to
> > change Dial-in permissions (Read/Write Remote Access information) and they
> > can view the Dial-in settings but cannot change them - the error they
> > recieve
> > is "Dial-in profile changes were not saved because: Access is denied".
> >
> > I have tried to replicate this in a test VM domain and was unable to.
> > Do these users require special permissions on the dial-in *.dll files or
> > something similar?
>
>
>