RAS User Account Administration

A Windows NT version 4.0 RAS server uses a user account database that contains information about a set of user accounts. The information includes a user's RAS privileges, which are a set of bit flags that determine how the RAS server responds when the user calls to connect. The RAS server administration functions enable you to locate the user account database, and to get and set the RAS privileges for user accounts.

A Windows NT version 4.0 RAS server can be part of a Windows NT/Windows 2000 domain, or it can be a stand-alone Windows NT Server or Workstation that is not part of a domain. For a server that is part of a domain, the user account database is stored on the Windows NT/Windows 2000 server that is the primary domain controller (PDC). A stand-alone server stores its own local user account database. To get the name of the server that stores the user account database used by a specified RAS server, you can call the RasAdminGetUserAccountServer function. You can then use the name of the user account server in a call to the NetQueryDisplayInformation function to enumerate the users in a user account database. You can also use the server name in calls to the RasAdminUserGetInfo and RasAdminUserSetInfo functions to get and set the RAS privileges for a specified user account.

The RasAdminUserGetInfo and RasAdminUserSetInfo functions use the RAS_USER_0 structure to specify a user's RAS privileges and call-back phone number. The RAS privileges indicate the following information:

• Whether the user can make a remote connection to the server or the domain to which the server belongs.
• Whether the user can establish a connection through a call-back, in which the RAS server hangs up and then calls back to the user to establish the connection.

Each user account specifies one of the following flags to indicate the user's call-back privilege.