RE: RAS time limts

Hi Brian,

Thanks for your reply.

It is not necessary to set both timers and you can select one of them.

Thanks again!

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: RAS time limts
| From: =?Utf-8?B?QnJpYW5NdWx0aUxhbmd1YWdl?=
<BrianMultiLanguage@xxxxxxxxxxxxxxxxxxxxxxxxx>
| | Subject: RE: RAS time limts
| Date: Mon, 9 Jan 2006 11:07:02 -0800
|| Newsgroups: microsoft.public.windows.server.sbs
| |
| Thank you.
| So both timers need to be set to inforce a client time out on VPN?
|
|
| ""Crina Li"" wrote:
|
| > Hi Brian,
| >
| > Thank you for posting in SBS newsgroup.
| >
| > I am sorry for the delayed response due to weekend. Please understand
that
| > the newsgroups are staffed weekdays by Microsoft Support professionals
to
| > answer your systems and applications questions. Your understanding is
| > greatly appreciated!
| >
| > If you want to disconnect idled VPN connections, you can configure the
RRAS
| > Remote Access Policies. To do so, please perform the following steps:
| >
| > 1. Open RRAS console and then expand server name.
| > 2. Click Remote Access Policies and then right click Small Business
Remote
| > Access Policy in the right pane and select Properties.
| > 3. Click Edit Profile in the Settings tab.
| > 4. On the "Dial-in Constraints" tab, select "Minutes server can remain
idle
| > before it is disconnected (Idle-Timeout)" and then specify the number
of
| > minutes that the client can be idle for. Click OK.
| >
| > You can also create a new access policy as following:
| >
| > 1. Click Start->Run, type rrasmgmt.msc and click OK to open the Routing
and
| > Remote Access console.
| > 2. Expand your server name, right click on the "Remote Access Policies"
| > node and choose New Remote Access Policy.
| > 3. Click Next.
| > 4. Choose "Set up a custom policy", type "Disconnect Idle VPN
Connections"
| > as the policy name and click Next.
| > 5. On the "Policy Condition" page, click Add, select the last item
| > "Windows-Groups" and click Add. Click Add. If you only want to apply
the
| > condition to specific users, you can choose the corresponding user
group
| > (you may need to firstly create the group and put the users in). If you
| > want all users to be disconnected after a period of idle time, you can
type
| > "domain users", click Check Names and click OK. Click OK and then click
| > Next.
| > 6. Choose "Grant remote access permission" and click Next.
| > 7. Click the "Edit Profile" button. On the "Dial-in Constraints" page,
| > select "Minutes server can remain idle before it is disconnected
| > (Idle-Timeout)" and then specify the number of minutes that the client
can
| > be idle for. Click OK and then click Next.
| > 8. Click Finish.
| > 9. Right click the new created policy and choose Move Down. Move it to
the
| > 3rd order.
| > 10. Right click on the server name and choose All Tasks->Restart. Then
| > check if things are working as expected.
| >
| > For more information about Remote Access Policy, please refer to the KB
| > articles:
| >
| > 323441 How To Install and Configure a Virtual Private Network Server in
| > Windows
| > http://support.microsoft.com/?id=323441
| >
| > 313082 HOW TO: Enforce a Remote Access Security Policy in Windows 2000
| > http://support.microsoft.com/?id=313082
| >
| > 323381 How to Allow Remote Users to Access Your Network in Windows
Server
| > 2003
| > http://support.microsoft.com/?id=323381
| >
| > I am appreciated your time and look forward to hearing from you.
| >
| > Best regards,
| >
| > Crina Li (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| >
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| > --------------------
| > | Thread-Topic: RAS time limts
| > || From: =?Utf-8?B?QnJpYW5NdWx0aUxhbmd1YWdl?=
| > <BrianMultiLanguage@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | Subject: RAS time limts
| > | Date: Fri, 6 Jan 2006 09:17:04 -0800
| > | | Newsgroups: microsoft.public.windows.server.sbs
| > | |
| > | In Routing and Remote Access, Remote access policies, Small Business
RAP,
| > | properties, Edit dial in profile,
| > |
| > | Is that where I define an idle time on a VPN session for disconnect?
| > | Too many lazy users are just connecting and not doing anything.
| > | Thanks.
| > |
| >
| >
|

.