Constraints Of The Dial-in Properties Page

By Author: jennie
Total Articles: 286

After you understand how remote access policies work, you need to gain Vista cert knowledge of the constraints that they can place on remote access connections in order to design remote access policies that meet your security policy. With the exception noted earlier,each remote access connection is subject to two sets of constraints: those on the user account dial-in property page, and those in the remote access policy. You will use your knowledge of both to design remote access policies.
Dial-in account properties are the first barrier to remote access. By default, user accounts are denied access, as shown in Figure 10-6. The dial-in properties page offers the following constraints:
Allow. The connection is permitted. (Remote access policy conditions and restrictions can still terminate the connection.)
Deny. Unless user dial-in properties are ignored, the connection attempt will always be refused.
Control Access Through Remote Access Policy. This choice is available only for stand-alone Windows 2000 and Windows Server 2003 remote access servers and
Windows 2000 and later native and functional mode domains. (The Administrator and Guess accounts on stand-alone servers and on Windows 2000 and later native
and functional mode domains are set to Control Access Through Remote Access Policy by default. New accounts will also be set this
70-640. In Windows 2000 Mixed
functional mode domains, the default is Deny access.
Verify Caller ID. If used, this constraint checks to see that caller is calling from a phone number entered in this location. If some number that is not on the list is used, the connection is terminated. Caller ID must be supported by the caller, the phone system between the caller and the remote access server, and between the remote access server and the call answering equipment. The call answering equipment must be able to provide the remote access server with the number, and the remote access server must also have the correct driver to pass the information to the Routing and Remote Access Service. If this setting is configured but these specifications are not met, the connection is denied.
Allow Callback. The server "will disconnect and dial the number entered in the property pages or the number indicated by the client if the property pages are
configured to allow this. The length of the number allowed is longer in Windows Server 2003—up to MCSE 2003 certification, as opposed to 48 in Windows 2000.