答疑整理：

1、A remote access connection has been authenticated, the dial-in properties of the
user account are set to Allow Access, and the first matching remote access policy
is set to Grant Remote Access Permission. If the remote client still cannot successfully
connect to the remote access server, what is the most likely explanation?
Constraints configured in the remote access policy profile, such as allowed dial-up hours, are
preventing the connection from being established.

2、When you create a new domain in a Windows Server 2003 network, the default
domain functional level is Windows 2000 mixed. How is the Allow Access setting
in the dial-in properties of a user account different in this environment from that
in other server environments?
In Windows 2000 mixed-mode domains, the Allow Access setting does not override the access
permission set in the remote access policy. In other server environments, the Allow Access setting
does override the access permission configured in the remote access policy.

3、You have configured a VPN server, but users report that they sometimes cannot
connect. You have noticed that the greatest number of complaints occur when
network use is highest, and you have ruled out addressing as the cause. What is
the most likely reason for the intermittent access problems?
You have not configured enough VPN ports to support the number of VPN users who want to
connect at once during periods of high us

4、How can you migrate an IAS server?
First, use the Netsh aaaa show config >filename.txt command to dump the complete IAS server
configuration into a script file. Then you can install the configuration included in this script file
onto a particular IAS server by running the Netsh exec [path]\filename.txt command on the target
server computer.

5、How can you enforce 128-bit encryption for dial-up connections at the remote
access server?（未完……本课程正式学员可登录学习系统，进入对应课程，在窗口左边的“课程资料室”内进行在线浏览。）