Setting the WTS Profile Path for a user account, sets the RAS permissions to 'Deny'. (NETIQKB41834)

fact
Directory and Resource Administrator 6.x

fact
Directory and Resource Administrator 7.0

fact
Directory and Resource Administrator 7.0 SP1

symptom
Setting the WTS Profile Path for a user account, sets the RAS permissions to 'Deny'.

symptom
Using either DRA or native tools to set the Microsoft Windows Terminal Server (WTS) Profile Path for a user account is successful, but when looking at that same users, Microsoft Remote Access Server (RAS) properties reveals that the RAS permissions have been set to 'Deny', possibly preventing some users from accessing the network.

cause
This is a known Microsoft issue caused by setting the WTS properties for the first time in native mode domain, this does not apply for domains running in mixed mode.

fix

This issue is resolved in Directory and Resource Administrator (DRA) 7.5 and later.

To resolve this issue, upgrade to the latest version of DRA.

note

For more information, see the following Microsoft Knowledge Base article:

Modifying the Terminal Server Profile Properties Sets Dial-in Access to "Denied"

Formerly known as NETIQKB41834