Windows NT, Windows 2000, and Windows 9x clients that try to establish a PPTP session with a Windows 2000 PPTP server receive:
Login failed: username, password, or domain was incorrect.</b>
The account for user <username> connected on port VPN3-127 does not have Remote Access privilege.
The line has been disconnected.
Event ID 20189
The user <username> connected from x.x.x.x but failed an authentication attempt due to the following reason:
The user tried to connect using an unauthorized dial-in media.</b>
1. Start the Routing and Remote Access administrative tool.
2. Expand the options under your Remote Access Service (RAS) server's name.
3. Press Remote Access Policies, right-click, and press Properties on Allow access if dial-in permission is enabled.
4. Press Edit Profile.
5. On the Dial-in Constraints tab, do one of the following:
Select <b>Restrict Dial-in Media</b>, and then select <b>Ethernet</b> and <b>VPN</b> from the list of options available.
7. Press OK.