Jump to content

Help with VB Script


Recommended Posts

Hi,

I'm trying to find all the users in AD that have Dial-in Access. However I need to use the "Control Access through Remote Access Policy" option as a lookup. So something like:

where obj=user and AND msNPAccessDialin = TRUE type thing. I have the follow code but it doesn't work for what I'm looking for. Can any help me with a mod please?

Const ADS_SCOPE_SUBTREE = 2

Dim Fso :Set Fso = CreateObject("Scripting.FileSystemObject")

Set objConnection = CreateObject("ADODB.Connection")
Set objCommand = CreateObject("ADODB.Command")
objConnection.Provider = "ADsDSOObject"
objConnection.Open "Active Directory Provider"
Set objCommand.ActiveConnection = objConnection

objCommand.Properties("Page Size") = 1000
objCommand.Properties("Searchscope") = ADS_SCOPE_SUBTREE

objCommand.CommandText = _
"SELECT Name FROM 'LDAP://dc=domain,dc=com' WHERE objectCategory='user' " & _
"AND msNPAccessDialin = TRUE"
Set objRecordSet = objCommand.Execute

Dim Ts

Set Ts = Fso.CreateTextFile("Text_Report.txt")

Ts.WriteLine Now

objRecordSet.MoveFirst

Do Until objRecordSet.EOF

Ts.WriteLine objRecordSet.Fields("Name").Value

Wscript.Echo objRecordSet.Fields("Name").Value

objRecordSet.MoveNext
Loop
Ts.Close

Edited by bbbngowc
Link to comment
Share on other sites


If Remote Access Permission (Dial-in or VPN) Allow Access is selected then msNPAllowDialin is TRUE

If Remote Access Permission (Dial-in or VPN) Deny Access is selected then msNPAllowDialin is FALSE

If Remote Access Permission (Dial-in or VPN) Control Access through Remote Access Policy is selected then msNPAllowDialin has no value.

Therefore try changing the line to say:

WHERE objectCategory='user' " & _
"AND msNPAllowDialin <> '*'"

Link to comment
Share on other sites

If Remote Access Permission (Dial-in or VPN) Allow Access is selected then msNPAllowDialin is TRUE

If Remote Access Permission (Dial-in or VPN) Deny Access is selected then msNPAllowDialin is FALSE

If Remote Access Permission (Dial-in or VPN) Control Access through Remote Access Policy is selected then msNPAllowDialin has no value.

Therefore try changing the line to say:

WHERE objectCategory='user' " & _
"AND msNPAllowDialin <> '*'"

Thanks. This worked.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...