Configuring User Access

In the previous chapter, you set up the server to accept incoming calls. Now it’s time to determine who can actually use the remote access services. You do this in two ways:

• By setting up remote access profiles on individual accounts
• By creating and managing network access policies that apply to groups of users

This distinction is subtle but important because you manage and apply profiles and policies in different places.

Setting Up User Profiles

Windows Server 2008 R2 stores a lot of information for each user account. Collectively, this information is known as the account’s profile, and it’s normally stored in Active Directory. Some settings in the user’s profile are available through one of the two user-management snap-ins: