LDAP connection on local server without domain and active directory

I want to set the "msNPAllowDialin" value to deny for a local user on stand alone Windows 2003. I am right now using the WinNT:// connection method and found that this property can only be set with LDAP connection. Can anyone tell me how should the LDAP connection string look like if you need to modify this on a user named "TestUser" in the default "Users" folder on the server "TestServer"? Thanks

I think that it can be done with userDN = The users distinguished name:

Set objUser = GetObject ("LDAP://" & userDN )

objUser.Put "msNPAllowDialin", newValue

objUser.SetInfo

I dont think you will be able to access RAS objects with the WINNT Provider.

Could you please specify in detail what are you trying to do exactly? Unless you are running AD LDS (ADAM) locally there is no LDAP server on your machine. So I just want to clear up that, are you trying to connect to AD from a standalone into the domain or trying to read the local sam file? Thanks.