Remote Access Policy--Example 1

Scenario

You are the network administrator of a mixed mode Windows 2000 domain for a company called Corp.  You must set up a remote access policy for your sales force that covers the east coast.  The only users that currently have access to the network remotely are members of the IS group and their permissions are currently configured through the user properties page in Active Directory Users and Computers.  You need to set up a policy that will still allow the IS group to connect remotely but give your sales force the ability to connect from Monday through Saturday between the hours of 8AM and 8 PM.  

Select the required steps and arranged them in the order in which they are performed.   

Delete the original remote access policy

Select each sales employee user account in Active Directory Users and Computers and change the Dial In setting to allow access.

Select "Control Access Through Remote Access Policy" for each sales person in Active Directory Users and Computers

Modify the original remote access policy condition to include the Sales group

Create a new group in Active Directory Users and Computers called Sales.  Add all the sales employees to that group.

Move the new remote access policy to a higher priority than the default remote access policy.

Select "Grant Remote Access Permission" in the new policy

Create a new policy and include the Windows Group condition selecting the Sales group and the time restrictions of Monday through Saturday between the hours of 8AM and 8 PM.