We recently made some changes to our network that require us to set the Network Access Permission to Allow under the Dial-In tab of a users account in AD. The issue we have is that we have about 600 users in a single OU without a consistent value for this option set. So, my question is if there is a simple way to make the change to all of the users at once? One of our guys played around with creating a GPO, but that doesn't work with what was done on our network.
I looked at using a dsquery and piping the results to a dsmod command, but either I'm going down the wrong path or I have the syntax wrong. What I was trying was:
dsquery user ou="Employee Accounts",ou=users,ou="branch name",dc=domainpiece1,dc=domainpiece2 | dsmod user -msNPAllow DialIn true
We only want to change the value for this one OU.