Shulou(Shulou.com)06/02 Report--

When enterprises use AD+Radius as login information, you need to enable the dial-in attribute.

It's OK to turn it on manually when the number is small, but it takes a bit of time when there are a large number of people.

If you have found the batch processing method on the Internet, you need to export the user information first, and then introduce the information to modify it. And still use for, which is a little difficult to understand at my half-stupid level.

During this period of time in the study of powershell, and finally found a simpler way. One line of power shell command is done.

Get-ADUser-SearchBase 'OU=XXX,DC=test,DC=test,DC=com'-Filter-Properties | Set-ADUser-Replace @ {msNPAllowDialin=$true}

$true is allowed to access

$false denies access

Null is to restore the default, that is, to control access through NPS network policy

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.