I have Windows Server 2008 (non-R2) without AD.
I have a number of users. How to allow them only connect to VPN and disallow interactive login? How to setup it via creating few groups?
Control Panel > Administrative Tools > Local Security Policy
Local Policies > User Right Management