Delegation / RRAS Service

[Frederic ESNOUF \(MVP-ISA\)]

Hi,

I just wonder how to delegate rights on windows 2003 RRAS Service.

What do I have to do if I want to delegate the right to unquaratine to a
specific user ? can I go this deep ?

Thanks

Regards

FE

 

[Priya Raghavan [MSFT]]

You can create a Remote Access Policy with which that specific user / group
is not put into Quarantine.

 

[Frederic ESNOUF \(MVP-ISA\)]

Hi,

In fact I would like my own program to be able to send an unquarantine
request to the RRAS service (mpr APIs). Today with an admin account it works
fine, but I would like to know if I can delegate just this right of
unquarantine to a user... and so to not use an admin account.

Is this possible ?

Thanks

FE

 

[Priya Raghavan [MSFT]]

That MPR API "MprAdminConnectionRemoveQuarantine ( ) can only be called with
admin privileges or using the local system account.
You cannot delegate that right to any other user.