The control on the form FormADSAccountMasterData does not only represent "ADSAccount.AllowDialIn" but is calculated from AllowDialin and AllowDialinByPolicy.
The following applies:
AllowDialIn = 0, AllowDialInByPolicy = 0 -> Deny access
AllowDialIn = 0, AllowDialInByPolicy = 1 -> Control access using remote access policy
AllowDialIn = 1, AllowDialInByPolicy = 0 -> Allow access
Two errors result from this:
1. The control displays the blue icon for changed values only if "AllowDialIn" changes. If "AllowDialinByPolicy" changes, the icon is missing.
2. If one of the two values is changed by template, the content is not updated.
For example: currently selected is "Deny access". Per the template "AllowDialIn" this changes to "1". The display should change to "Allow access". But it does not.