Configure a remote access policy to grant or deny access

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To configure a remote access policy to grant or deny access

Do one of the following:
- Open Routing and Remote Access and, if necessary, double-click Routing and Remote Access and the server name.
- Open Internet Authentication Service and, if necessary, double-click Internet Authentication Service.
In the console tree, click Remote Access Policies.
In the details pane, double-click the policy that you want to configure.
Under If a connection request matches the specified conditions:
- To grant dial-up permission for these users, click Grant remote access permission.
- To deny dial-up permission for these users, click Deny remote access permission.

Notes

To perform this procedure, you must be a member of the Administrators group. As a security best practice, consider using the Run As command rather than logging on with administrative credentials. If you have logged on with administrative credentials, you can also open Routing and Remote Access by clicking Start, clicking Control Panel, double-clicking Administrative Tools, and then double-clicking Routing and Remote Access. For more information, see Default local groups, Default groups, and Using Run as.
To open Internet Authentication Service, click Start, click Control Panel, double-click Administrative Tools, and then double-click Internet Authentication Service.
The Remote Access Permission setting on the dial-in properties of the user or computer account overrides this setting if it is set to either Allow access or Deny access.

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.