Create an Active Directory user account for a router

1. Open the Active Directory Users and Computers snap-in, and create a user account for the calling router (for a two-way connection, create a user account for the calling router in both sites). The name of the account must match the name of a corresponding demand-dial interface on the remote router.
   
2. To ensure that connectivity occurs, clear the User must change password at next logon check box and select the Password never expires check box on the Account tab on the property sheet for the user account object.
   
3. On the user account Dial-in tab, select one of the following options:
   
   
   • Allow access. This option overrides the grant or deny remote access permission setting specified on the Properties page of any associated remote access policy.
     
   • Control access through Remote Access Policy. This option ensures that the grant or deny remote access permission setting specified on the Properties page of any associated remote access policy is used.