Directory Services/Active Directory

Ulf B. Simon-Weidner's Blog
Dial-In Tab in Active Directory-Users and Computers

I recognized today that one of the major by-designs of the ADUC Dial-In Tab is now in the public Knowledge Base:

837490 The Dial-in tab does not appear when you use the Active Directory Users and Computers snap-in to view the properties for a domain user on a Windows XP-based computer
http://support.microsoft.com?id=837490

This fixes the issue with XP-Clients that the Adminpak does not contain the Dial-In Tab. Those settings had to be done using Remote Desktop Publishing (RDP - formaly known as Terminal Services Administration Mode). Using the fix mentioned in the KB the Dial-In Tab is now available on XP Clients.

Other issues of my "favorite" tab:

You are not able to delegate rights - if you don't have full administrative access then clicking on the tab displays an error message "Could not load the Dial-in profile for this user because: Access is denied." and the page appears empty with just a message "Dial-in page initialization failed." This is fixed (see below - don't stop reading here) but not in the public KB, call PSS and request the following fix:

822542 Delegated administrator not able to open the dial-in tab

After you implemented that fix, delegated administrators are able to receive the tab, and enabled and disabled fields based on the delegated rights work.

However, there's still an issue: If you don't have delegated rights for the full Dial-In Tab, you are able to change the stuff you have rights to in the GUI, but it won't take the changes when you hit Apply or OK. My issue is that a customer wanted the msRadiusCallbackNumber delegated - their helpdesk should not be allowed to decide whether or not a user had Dial-In Rights, but to change the Callback-Number if needed. We have a open case on this, if anyone else needs delegated permissions within this tab (and has preferably a support contract with MS) let me know - as far as I know right now this will not be fixed for a single customer.

Published Thu, Sep 2 2004 7:20 by Ulf B. Simon-Weidner

Comments

# re: Dial-In Tab in Active Directory-Users and Computers@ Monday, September 27, 2004 10:00 PM

Pretty much same problem. Called "monkey-mouth" B. Gates soft to find out that Windows Server 2003 has absolutely no warranty support I purchased the software less than 1 month ago.

Ulf B. Simon-Weidner

# re: Dial-In Tab in Active Directory-Users and Computers@ Tuesday, November 02, 2004 5:49 PM

Same problem right now ...

Ulf B. Simon-Weidner

# re: Dial-In Tab in Active Directory-Users and Computers@ Tuesday, January 04, 2005 4:16 PM

Same Problem here. I applies SP2 and all the current security patches and still no good. No dial in tab. I have uninstalled the Server 2003 adminpak and installed the Server 2000. The server 2000 adminpak DOES give you the dail-in tab

Ulf B. Simon-Weidner

# re: Dial-In Tab in Active Directory-Users and Computers@ Friday, January 07, 2005 11:00 AM

Sorry - KB 837490 has been changed yesterday. You still need a hotfix to get the Dial-Up Page.
See http://support.microsoft.com?id=837490

Ulf

Ulf B. Simon-Weidner

# re: Dial-In Tab in Active Directory-Users and Computers@ Monday, January 17, 2005 5:59 PM

Check to verify that File and Print Sharing is checked in your NIC properties.
Experienced after an upgrade SBS 2000 to 2003.

Ulf B. Simon-Weidner

# re: Dial-In Tab in Active Directory-Users and Computers@ Wednesday, January 19, 2005 1:30 PM

thanks Jeff, you're a lifesaver

Ulf B. Simon-Weidner

# re: Dial-In Tab in Active Directory-Users and Computers@ Thursday, January 20, 2005 6:08 PM

jeff i love you your a real lifesaver

Ulf B. Simon-Weidner