Article ID: 891240 - View products that this article applies to.
When you configure virtual private network (VPN) client access in Microsoft Internet Security and Acceleration (ISA) Server 2004 to specify which local groups have remote access, you can add only the following groups:
This issue occurs because the other local groups are generic. The VPN server cannot distinguish between local administrators and domain administrators.
To give remote access to a local administrator, modify the Administrator dial-in properties. To do this, follow these steps:
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.