Configure remote access policies on Windows 2000 Server

by Jim Boyce | Apr 03, 2006 1:20:00 PM

Tags: TELECOMMUNICATIONS, Microsoft Windows 2000 Server, Jim Boyce, Microsoft Windows, server, remote access, remote access policy, Internet Authentication Service, RRAS, pane, console, Microsoft Windows 2000, Windows 2000 Server Tips Newsletter

5 comment(s)

Takeaway: Considering remote access for your users? Jim Boyce gives you the rundown on what you need to know about configuring remote access policies on your Windows 2000 Server.

If you are considering providing remote access capability for your users, controlling who can connect and when they can connect is an important consideration. As a Windows 2000 Server administrator, you can control access by using a combination of remote access and account policies.

If you are using Routing And Remote Access Service (RRAS) to provide dial-in authentication, you must configure one or more remote access policies through the Routing And Remote Access console. With the console open, click the Remote Access Policies branch in the left pane. Defined remote access policies appear in the right pane.

By default, RRAS includes a single policy that uses the Day-and-Time-Restrictions attribute to control access. The default policy globally denies access during all hours and covers all users, but you can modify the policy to enable access rather than deny it. However, this is just one of two tasks needed to enable remote access for a user. You must also modify the user's account properties.

To modify these properties, open the Active Directory Users And Computers console and open the user's account. Then, click the Dial-In tab. By default, the user account is configured to allow dial-in access. On the Dial-In tab you can deny access, specify call-back options, assign a static address to the user, and define and apply static routes. After you have set your preferences, click OK to apply the changes.

In addition to assigning remote access policies through RRAS, you can also configure policies in Internet Authentication Service (IAS). For example, you might be using IAS to handle authentication for a dial-up concentrator. If so, you need to configure remote access policies in the IAS console. Open the console, click the Remote Access Policies branch in the left pane, and view and modify policies in the right pane. The options and methods are the same in IAS as in RRAS.