This article was previously published under Q289264
This article has been archived. It is offered "as is" and will no longer be updated.
When a user has his or her profile set to enforce callback to a specific telephone number, if this user establishes a VPN connection and you are using Microsoft Internet Authentication Server (IAS) to authenticate users, the connection does not work.
When you are using VPN, callback to a specific telephone number is not possible.
To resolve this problem, install the following hotfix, and then make the following change to your IAS configuration:
Open the IAS MMC Snap-in.
Right-click Remote Access Policies, point to New Remote Access Policy, and then click Custom policy.
Under policy conditions, choose "NAS-Port-Type" matches "Virtual (VPN)" then "Grant RAS permission"
Click Edit profile, click Advanced, click Add, and then click Ignore-User-Dialin-Properties.
Set the Ignore-User-Dialin-Properties attribute value to "TRUE".
To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in theMicrosoft Knowledge Base:
260910 How to Obtain the Latest Windows 2000 Service Pack
The English version of this fix should have the following file attributes or later:
Date Time Version Size File name ---------------------------------------------------------- 09-Aug-2001 19:21 413,696 Dnary.mdb 11-Sep-2001 19:06 5.0.2195.4115 28,944 Iasacct.dll 11-Sep-2001 19:06 5.0.2195.4115 97,040 Iasrad.dll 11-Sep-2001 19:06 5.0.2195.4115 97,552 Iassam.dll
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows 2000 Service Pack 3.
For additional information about how to install Windows 2000 and Windows 2000 hotfixes at the same time, click the article number below to view the article in the Microsoft Knowledge Base:
249149 Installing Microsoft Windows 2000 and Windows 2000 Hotfixes