Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am currently setting up an office VPN on a new server (running SBS 2011), and I keep getting "Error 812: The connection was prevented because of a policy configured on your RAS/VPN server..." when I connect with my Windows 7 laptop. However, I have the NPS policy configured to let all users of a certain group connect via VPN and the authentication methods match what the server is looking for. I also have set the NPS policies to honor dial-in access overrides on specific accounts.

XP also errors out when connecting externally, saying that the user does not have VPN privileges (Error 649). Any ideas? Even explicitly giving a user dial-in privileges does not change this.

share|improve this question
up vote 0 down vote accepted

I found the solution, you have to add users to the Windows SBS Virtual Private Network Users group. NPS doesn't seem to honor a normal usergroup (which is how I had it configured before).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.