Modifying User Dial-In Properties to Work with Remote Access Policies

Modifying User Dial-In Properties to Work with Remote Access Policies
You can edit a user's dial-in properties by opening the Microsoft Management Console (MMC) Active Directory Users and Computers snap-in and double-clicking the user whose properties you want to edit. At the Properties page, which Web Figure A shows, click the Dial-in tab. When a user tries to connect to your network through the VPN, Internet Authentication Service (IAS) first checks the Remote Access Permission (Dial-in or VPN) setting. If the account is set to Allow access or Deny access, IAS responds accordingly and doesn't process the account's remote access policies. To ensure that IAS uses the remote access policies you've set up, select Control access through Remote Access Policy. If that setting is disabled for user accounts in your domain, it means that your domain is still running in mixed mode to support Windows NT Server domain controllers (DCs). After you switch the domain to native mode, Windows lets you select Control access through Remote Access Policy. . . .