Is there any way I can prevent certain domain users from accessing the vpn concentrator while allowing others (assuming they get there hands on the client software)?
For example, with our old RRAS solution, we could go into Active Directory Users and Computers and uncheck the "Allow Dial-in" box, successfully preventing them from using it to connect to our network remotely.
What we'd like is for there to be one challange/response prompt that requires they authenticate one of our domain controllers, but will also only allow certain users.
