If you are using active directory, make sure that the "Allow Access" radio button is selected in the "Dial-in" tab of the user's properties. Additionally, make sure that in the Remote Access Policy ...