How to modify Remote Access Permission for a user?

Remote access permission settings are configured to allow or deny Dial-In or VPN access for Active Directory (AD) users. You can also configure the remote access permission to be controlled through remote access policy.

Objective: To change the remote access permission settings for AD users.

Solution: ADManager Plus helps you configure these settings efficiently with options to set remote access control settings for multiple users using CSV import or for individual users using customizable templates and more.

3 ways to configure Remote access permission for Active Directory user accounts:

1. Bulk User modification using CSV import

1. Logon to ADManager Plus. Click Management tab.
2. On the left pane, select User Management.
3. From the Bulk User Modification section, under Terminal Services, select Dial-in or VPN Properties.
4. Select the desired Dial-In access option.
5. Select the domain you wish to modify users in. You can either choose multiple users one-by-one or use the CSV import option.
6. In case you have chosen Modify Bulk Users option, import a CSV containing the details of users you wish to modify. The LDAP attribute for this setting is msNPAllowDialin. You can learn more about CSV import here.
7. Select the desired users from the CSV and click Apply.

2. Using User Modification templates

1. Logon to ADManager Plus and click Management.
2. Under User templates, click User Modification Templates.
3. Click Create New Template.
4. Set a name and description for the template. Click Terminal tab.
5. Choose the desired settings for Remote Access Permission under the Sessions/Remote Control section.
6. Click Save Template.
7. Navigate to Management tab on the home page.
8. Choose Modify Single User or Modify Bulk users in case you want to modify multiple users.
9. Select the user you wish to modify or in case of bulk users, import a CSV containing the initials of users you wish to modify. You can learn more about modifying bulk users using CSV, here.
10. Under templates, choose the modification template created in step 4.
11. Click Preview to check if the changes to be made are correct and then click Update User.

3. Using Automation

1. Logon to ADManager Plus and click Management.
2. Under User templates, click User Modification Templates.
3. Click Create New Template.
4. Set a name and description for the template. Click Terminal tab.
5. Choose the desired settings for Remote Access Permission under the Sessions/Remote Control section.
6. Click Save Template.
7. Navigate to Automation tab on the home page.
8. On the left pane select Automation and click Create New Automation.
9. Set a suitable Automation Name and Description. Choose 'User automation' as the Automation Category and select the domain you want to configure the automation for.
10. Under the Tasks to automate section, select modify user by template as the Automation Task. Select the User modification template created earlier .
11. Choose Dial-in Deny Access report as the report from which objects are to chosen.
Note: Enable Implement workflow if you to review and approve this task in this automation. Learn more about configuring workflows here.
12. You can also select the time and frequency of report generation and enable notifications if you want the technician to be notified everytime the automation gets executed.
13. Click Save.