You cannot add some local built-in groups when you configure VPN client access in Internet Security and Acceleration Server 2004

Article translations Article translations
Article ID: 891240 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

When you configure virtual private network (VPN) client access in Microsoft Internet Security and Acceleration (ISA) Server 2004 to specify which local groups have remote access, you can add only the following groups:
  • HelpServicesGroup
  • IIS_WPG
  • TelnetClients
You cannot add other local built-in groups, such as Administrators, Backup Operators, or Power Users.

CAUSE

This issue occurs because the other local groups are generic. The VPN server cannot distinguish between local administrators and domain administrators.

WORKAROUND

To give remote access to a local administrator, modify the Administrator dial-in properties. To do this, follow these steps:
  1. On the ISA Server computer, click Start, point to Administrative Tools, and then click Computer Management.
  2. In Computer Management, click System Tools, click Local Users and Groups, and then click Users.
  3. In the Details pane, right-click Administrators, and then click Properties.
  4. On the Dial-in tab, click Allow access under Remote Access Permission (Dial-in or VPN).

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Properties

Article ID: 891240 - Last Review: January 25, 2005 - Revision: 1.0
APPLIES TO
  • Microsoft Internet Security and Acceleration Server 2004 Standard Edition
Keywords: 
kbtshoot kbprb KB891240

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com