RRAS 2003 default policies - what are they good for ????

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

After I have installed the RRAS server, I find two predefined policies:

"Connection to Microsoft Routing and Remote Access server"

Ok, great description, really. This means that I may use this server by crossing it and accessing my LAN, or does it mean that I may access this server (for admin purposes, for instance ...)?

Looking into the policy, it contains a deny rule, condition: MS-RAS_VENDOR="^311$"

I found no documentations anywhere about MS-RAS-VENDOR, or the quite strange format of the number.

Looking deeper into the policy, in the IP tab, I find an input packet filter (user IP/user mask -- any), but no output packet filter. Strange...

"Connections to other access servers"

What the heck are "other access servers" (assuming I have only one server running RRAs)?

Again, looking into the policy, I find a deny rule "Day-and-time-restrictions", value is "Mo -- So, 00:00-00:00). So I'd read that as deny anyone access any time.

Doesn't make any sense either, does it? And this time, on the IP tab, there are no input or output filters.

Who can clarify, what the default policies are about?

Thanks, Armin
.

Relevant Pages

  • Re: How to allow users to create groups and shares
    ... Add the user/group to the Computer configuration, windows settings, security settings, Local policies, "Allow logon locally" in the Default domain controllers policy and on a existing or new created policy for the member servers. ... Filtering: Not Applied ... check with GPMC on the server or from a client the policy settings. ...
    (microsoft.public.windows.server.active_directory)
  • Domain Controller Security Policy errors
    ... Security Policy or the Domain Controller Security Policy. ... The DC is also a print and file server. ... The domain controller for Group Policy operations is not available. ...
    (microsoft.public.win2000.active_directory)
  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)
  • Re: Move W2K3 server to its own OU seperate from SBS (MyBusiness) OU
    ... OU and move the member server to so that it does not inherit it's GPO from ... policies from inheriting the default domain policies of the SBS ... section of the default domain policy. ... In direct answer to your question, you would need to filter this ...
    (microsoft.public.windows.server.sbs)
  • Re: How to allow users to create groups and shares
    ... policy and on a existing or new created policy for the member servers. ... Filtering: Not Applied ... Allow remote desktop connections ... check with GPMC on the server or from a client the policy settings. ...
    (microsoft.public.windows.server.active_directory)