Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am currently setting up an office VPN on a new server (running SBS 2011), and I keep getting "Error 812: The connection was prevented because of a policy configured on your RAS/VPN server..." when I connect with my Windows 7 laptop. However, I have the NPS policy configured to let all users of a certain group connect via VPN and the authentication methods match what the server is looking for. I also have set the NPS policies to honor dial-in access overrides on specific accounts.

XP also errors out when connecting externally, saying that the user does not have VPN privileges (Error 649). Any ideas? Even explicitly giving a user dial-in privileges does not change this.

share|improve this question
add comment

1 Answer 1

up vote 0 down vote accepted

I found the solution, you have to add users to the Windows SBS Virtual Private Network Users group. NPS doesn't seem to honor a normal usergroup (which is how I had it configured before).

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.