Once you enable Routing and Remote Access, two remote access policies are automatically created. You can view the policies by clicking the Remote Access Policies container within the routing and remote access console. You can work with these two policies and change the existing settings or you can create new remote access policies.

Creating a new remote access policy does not need to be a difficult task. First of all, Windows Server 2003 includes a wizard that will walk you through the entire process. Second, if you know the settings you want to use in the policy ahead of time, the actual process of creating a policy is much easier.

The following steps describe how to create a new remote access policy in Windows Server 2003.

1. Click Start, point to Administrative Tools, and click Routing and Remote Access.
2. Expand your remote access server.
3. Right click Remote Access Policies and click New Remote Access Policy. This launches the New Remote Access Policy Wizard.
4. Click Next.
5. From the Policy Configuration Method screen, select how you want to set up the policy and type in a descriptive name for the policy. Click Next.
6. From the Access Method screen, select the remote access method for which the policy is being created. You can select VPN, Dial-up, Wireless, or Ethernet. Click Next.
7. On the User or Group Access screen select whether to grant remote access to individual users or groups. If you select the Group option, click the Add button to select the groups that the remote access policy will apply to. Click Next.
8. From the Authentication Methods screen, select the authentication protocols you want to include in the policy. You can choose from the following authentication methods:
   • Extensible Authentication Protocol (EAP)
   • Microsoft Encrypted Authentication version 2 (MS-CHAPv2)
   • Microsoft Encrypted Authentication (MS-CHAP)
9. Click Next.
10. On the Policy Encryption Level screen, select the encryption levels that you want the remote access policy to support. You can select from the following encryption levels:
11. Basic encryption (MPPE 40-bit)
12. Strong encryption (MPPE 56-bit)
13. Strongest encryption (MPPE 128-bit)
14. No encryption
15. Click Next.
16. Review the summary of settings you have configured for the remote access policy and click Finish.

Once your policy is created, it will be added to the list of policies in the Remote Access Policies container. If you need to edit any of the settings, right click the policy and select Properties. From the properties dialog box you can edit the conditions, permissions, and profile.