JSI Tip 2742. Your PPTP clients can't connect to your Windows 2000 PPTP server?

When your Windows 2000 Server is configured as a PPTP server and your PPTP clients run Windows 2000, Windows NT, or Windows 9x, they receive the following message when trying to establish a PPTP session:

Error 649Login failed: username, password, or domain was incorrect.

The PPTP server log contains:

Event ID 20078The account for user  connected on port VPN3-127 does not have Remote Access privilege.The line has been disconnected.Event ID 20189The user Administrator connected from x.x.x.x but failed an authentication attempt due to the following reason:The user tried to connect using an unauthorized dial-in media.

To fix this problem:

1. Start the RRAS administrative tool.

2. Expand the options under your RAS server's name.

3. Press Remote Access Policies and right-click and go to Properties on the default policy named Allow access if dial-in permission is enabled.

4. Press Edit Profile.

5. On the Dial-in Constraints tab, perform one of the following:

    Clear the Restrict Dial-in Media option

-or-

    Select Restrict Dial-in Media and then select Ethernet and VPN from the list.

6. Press Apply.

7. Press OK.