JSI Tip 4615. How do I enforce a remote access security policy in a Windows 2000-based Native-mode domain?

Microsoft Knowledge Base Article 313082 contains the following summary:

This step-by-step article describes how to enforce a remote access security policy in a Windows 2000-based Native-mode domain.

In a Windows 2000-based Native-mode domain, you can use the following three remote access policy behaviors:

NOTE: This method of enforcing a remote access security policy also applies to a stand-alone Windows 2000-based remote access server.

•	Explicit allow : The remote access policy is set to Grant remote access permission and the connection attempt matches the policy conditions.
•	Explicit deny : The remote access policy is set to Deny remote access permission and the connection attempt matches the policy conditions.
•	Implicit deny : The connection attempt does not match any remote access policy conditions.

To enforce a remote access policy:

1.	Configure the remote access policy conditions.
2.	Configure the user account dial-in settings.