On my Windows 2000 Native domain, I want to prevent service accounts from being able to connect via our MS VPN. (Via a Win2000 RAS server.)
Say my AD structure is like this:
I want to have AD users in the MyServiceAccts OU, but don't want them to be able to connect to the VPN.
My Remote Access Policy is set to "Allow Access If Dial-In Permission Is Allowed", and all my user accounts have "Control access through remote access policy" set.
I can see how to restrict it by user group, but not by OU.