When your Windows 2000 Server is configured as a PPTP server and your PPTP clients run Windows 2000, Windows NT, or Windows 9x, they receive the following message when trying to establish a PPTP session:

Error 649
Login failed: username, password, or domain was incorrect.
The PPTP server log contains:
Event ID 20078
The account for user <\username> connected on port VPN3-127 does not have Remote Access privilege.
The line has been disconnected.

Event ID 20189
The user Administrator connected from x.x.x.x but failed an authentication attempt due to the following reason:
The user tried to connect using an unauthorized dial-in media.
To fix this problem:

1. Start the RRAS administrative tool.

2. Expand the options under your RAS server's name.

3. Press Remote Access Policies and right-click and go to Properties on the default policy named Allow access if dial-in permission is enabled.

4. Press Edit Profile.

5. On the Dial-in Constraints tab, perform one of the following:

    Clear the Restrict Dial-in Media option

-or-

    Select Restrict Dial-in Media and then select Ethernet and VPN from the list.

6. Press Apply.

7. Press OK.