VPN connection to company network is a very common requirement. It allows mobile users to connect to corporate network. By default in Small Business Server 2008 users are not allowed to connect to VPN. When they try to connect to VPN server they receive Error 649: The account does not have permission to dial in. There are many solutions to that problem I will present the simplest, which is based on Role Management.

I assume that all users are granted the Role “Standard User”. We need to open SBS Console and go to Users and Groups and then select Users Roles tab.

Then we select Standard User Role and on right pane we click “Edit user role properties”

Than we select Remote Access on left pane and check the checkbox “This user role can access virtual private network (VPN)” and click Apply.

The last thing to do is to perform a test when you are connected to the internet outside your company.