Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I run Windows 2008 Server, I have Cisco ASAs setup for site-to-site vpns and remote-access vpn.

After researching, i read that you could change dial-in options to allow or disable VPN access for remote users.

however, i tested this on myself and it didn't do anything..

I have AAA servers setup, using the a/d server for authentication on the ASA. The connection profiles user the AAA server for authentication & authorization.

i have two AAA server groups, Server-AD users Kerberos for authentication and Server-AD2008 users LDAP for authorization

both groups include the server win2k8dc1 (my domain controller, a/d, dns, dhcp server)

not sure why this is not working, any help is appreciated


share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.