Hi, I need to give a member of our support team access to create / modify Remote access policies on our 2003 IAS server which is also a domain controller. What group does the uers account need to be a member of to achieve this. I don't really want to give them domain admin group membership. Thanks in advance for your help Regards John

Hi John, Thanks for posting here. Only member of administrators group could perform the IAS operations you described. In this case you may take look the security best practice suggestions that described in Notes paragraph of each article in the link below to achieve the goal: Configure Remote Access Policies http://technet.microsoft.com/en-us/library/cc783153(WS.10).aspx Notes To perform this procedure, you must be a member of the Administrators group. As a security best practice, consider using the Run As command rather than logging on with administrative credentials. If you have logged on with administrative credentials, you can also open Routing and Remote Access by clicking Start, clicking Control Panel, double-clicking Administrative Tools, and then double-clicking Routing and Remote Access. For more information, seeDefault local groups, Default groups, and Using Run as. Thanks. Tiger Li TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi John, If there is any update on this issue, please feel free to let us know. We are looking forward to your reply. Tiger Li TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.