Click here to get back home

RAS and VPN policies - help

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
RAS and VPN policies - help Michael 03-15-2007
Posted by Michael on March 15, 2007, 10:10 am
Please log in for more thread options
Hi,

We have NT users and a VPN server. Each NT user can VPN in if they have the
'grant dialin' box ticked. We have a VPN policy on the VPN server for this.
Everything works fine.

A while ago i noticed that any AD user could VPN in by default. The property
for each user was default to 'control access through remote access policy'.

So the other day i set a policy that said deny was the default. This works
fine. Now each AD user has to have 'Allow Access' ticked for them to be
allowed to VPN in.


My first qustion is why is it that we have to have two policies - one for NT
users and one for AD users?


My second question is on our seperate RAS server we have a similar policy
for NT users. The policy works fine.

However everything i try to do to set up a policy for AD users on our RAS
server does not work. It just won't let an AD user RAS in.

My second question is does anyone know why this is and what i can do to
start checking?


Thanks in advance. IT has me puzzled.

Michael.



Similar ThreadsPosted
policies September 12, 2005, 9:16 am
Account Policies - NT January 19, 2006, 3:14 pm
Group Policies September 13, 2006, 8:31 am
How Policies Work November 17, 2006, 2:43 pm
IAS EAP - TLS Policies question January 19, 2007, 3:20 pm
Multiple Password Policies? June 22, 2005, 12:15 pm
How to have 2 security policies on one server August 30, 2005, 8:11 am
2003 Group Policies?? April 19, 2006, 3:34 pm
2003 Group Policies April 24, 2006, 11:55 am
Export IPSec Policies to XML April 25, 2006, 7:03 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap