Welcome to MSDN Blogs Sign in | Join | Help

userparameters attribute in AD for a user (and how it sucks)!

Call me a stupid person (or just an angry one)!

I am attempting to write some .net code that will allow me to uncheck (or check) the "Allow logon on Terminal Server" option for a given user account.  And it is not as easy as it looks. 

I don’t want to load some Active X control to do it either (which can be done). 

Turns out that the userparameters attribute is a HUGE mess of data.  It seems that no one knows what all components use this to store data.  As it was stated elsewhere you need a secret decoder ring for each component that you want to modify setting for. 

If anyone knows anything about this setting in the AD please let me know. 

I hope this is something that we fix in future versions of Windows. 

--

Well looks like there is an unmanaged API that allows you to do what I want. 

After some direction from Alex.  I found http://members.lycos.nl/nessyh/vsgc/Classes/Backups/cWTS4.vb

 

Published Tuesday, March 29, 2005 11:56 PM by mpoulson
Filed under:

Comments

Wednesday, March 30, 2005 8:34 AM by Alex

# re: userparameters attribute in AD for a user (and how it sucks)!

The WTSQueryUserConfig and WTSSetUserConfig APIs seem to be the way to go. It seems like direct LDAP access to these parameters is not the preferred or intended path.
Wednesday, March 30, 2005 10:47 AM by spat

# re: userparameters attribute in AD for a user (and how it sucks)!

Im not sure how one would do this in c# but take a look at <br> <br><a target="_new" href="http://msdn.microsoft.com/library/default.asp?url=/library/en-us/termserv/termserv/iadstsuserex.asp">http://msdn.microsoft.com/library/default.asp?url=/library/en-us/termserv/termserv/iadstsuserex.asp</a> <br> <br>spat
New Comments to this post are disabled
 
Page view tracker