msnpAllowDialin parameter problems

  • 59 Views
  • Last Post 07 February 2017
mammacori posted this 07 February 2017

Dear all,
   we are running Active Direcotry on windows server 2012 R2 Standard
I want to get a list of all user that can connect to VPN therefore i'm query the property msnpAllowDialin
we do still have almost 400 users and i expect 100 users with the property set to TRUE.
If i run powershell query i get only 30 users :(
if i query with powershell a specific user i know having property set to TRUE i get property not set but if i use a tool like "active directory tool" for the same user that property is set to TRUE :(
does anybody can help me ?
i attach two snapshot to better explani the problem.
thanks for the support you will be able to prived me
Alessnadro
--
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GCS/IT d s+:+ !a C+++ U+ P+++ L++
W++ o++ w--- M++ Y-- PGP--- t X R tv--
b++ DI++ D--- G z+++
------END GEEK CODE BLOCK------

Order By: Standard | Newest | Votes
webster posted this 07 February 2017

You don't show us your query. Does this help:

 

https://myousufali.wordpress.com/2012/08/02/listing-all-users-they-have-the-dial-in-permission-in-ad/

 



PowerShell Get-ADUser (with AD modules):



Get-ADUser -LDAPFilter “(&(objectCategory=person)(objectClass=user)(msNPAllowDialin=TRUE))”

 

 

Webster

 

show

mammacori posted this 07 February 2017

ops, sorry for that
here it is:
Get-ADUser lecutuli -properties *
a.
PS
i tried your query but i get only the subset of user and, for example, lecutuli does not appear but i know he has the property set TRUE since he can connect threough VPN
this makes me crazy :(


show

Close