Restrict RAS to Domain Members

["Danny Puckett" <dpuckett () comresource com>]

I have an SBS client who wishes to restrict VPN (PPTP) access to domain
computers. I have tweaked the Remote Access Policy on the RAS server to
to have the policy condition of 'Windows-Groups matches "DOMAIN\SBS
Mobile Users" AND Windows-Groups matches DOMAIN\Domain Computers' but
this ends up blocking all VPN connections. Is this the correct way to
accomplish this?

Any input would be appreciated. Thanks