Hi Edgardo, When in native mode, the default NEW user account setting is control via remote access policy. Now, if you created user accounts before going into native mode.... :) Tom Thomas W Shinder, M.D. Site: www.isaserver.org <http://www.isaserver.org/> Blog: http://spaces.msn.com/members/drisa/ Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls ________________________________ From: Edgardo Balansay [mailto:balansay@xxxxxxxxx] Sent: Wednesday, February 01, 2006 6:11 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Botched Setup based on W3k server / ISA 2004 http://www.ISAserver.org On 2/1/06, Glenn <glenn.johnston@xxxxxxxxxxx > wrote: Any suggestions on how to get new users working on VPN, again with out breaking anything. In AD, look for the "dial-in" tab of the user and set to allow. Alternatively, check whatever groups users are members of that are *granted* VPN access, IIRC Win2k3 can allow VPN by group if in 2003 'native' mode(?). Goodbye, Edgardo ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx