Windows NT, Windows 2000, and Windows 9x clients that try to establish a PPTP session with a Windows 2000 PPTP server receive:

<b>Error 649
Login failed: username, password, or domain was incorrect.</b>
At the same time, the server's event log receives:
<b>Event ID 20078
The account for user <username> connected on port VPN3-127 does not have Remote Access privilege.
The line has been disconnected.

Event ID 20189
The user <username> connected from x.x.x.x but failed an authentication attempt due to the following reason:
The user tried to connect using an unauthorized dial-in media.</b>
To fix this problem:

1. Start the Routing and Remote Access administrative tool.

2. Expand the options under your Remote Access Service (RAS) server's name.

3. Press Remote Access Policies, right-click, and press Properties on Allow access if dial-in permission is enabled.

4. Press Edit Profile.

5. On the Dial-in Constraints tab, do one of the following:

Clear the <b>Restrict Dial-in Media</b> option.

              -or-

Select <b>Restrict Dial-in Media</b>, and then select <b>Ethernet</b> and <b>VPN</b> from the list of options available.
6. Press Apply.

7. Press OK.