Establish a Remote Client Access Authorization Method

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

You can use remote access policies to authorize remote client access either by group or by user.

If you authorize access by group, you can restrict network access based on an account’s group membership. For example, you can create one group for wireless users and another group for dial-in users, and create separate remote access policies for each group by using the Windows-Groups attribute (condition) of the remote access policy.

To authorize access by group in a Windows Server 2003 or a Windows 2000 native domain, set the remote access permission on every user account to Control access through Remote Access Policy. Remote access permissions are then determined by the remote access permission setting on the remote access policy.

For more information, see "Remote Access Policies" in Help and Support Center for Windows Server 2003.