Enable Dial-in Access for the Administrator Account
In non-native mode Active Directory domains, all user accounts have dial-in access disabled
by default. In this circumstance, you must enable dial-in access on a per account basis. In
contrast, Active Directory domains in native mode have dial-in access set to be controlled by
Remote Access Policy. Windows NT 4.0 dial-in access is always controlled on a per user
account basis.
In our current example, the Active Directory is in Windows Server 2003 mixed mode, so we
will need to manually change the dial-in settings on the user account.
Perform the following steps on the domain controller to enable Dial-in access for the
Administrator account:
1. Click Start and point to Administrative Tools. Click Active Directory Users and
Computers.
2. In the Active Directory Users and Computers console, click on the Users node in the
left pane. Double click on the Administrator account in the right pane of the console.
3. Click on the Dial-in tab. In the Remote Access Permission (Dial-in or VPN) frame,
select Allow access. Click Apply and click OK.
4. Close the Active Directory Users and Computers console.
ISA Server 2004 Configuration Guide 234