How do remote access policies work in IAS?
Remote access policies provide the authorization of the connection attempt. Once the user credentials have been authenticated, IAS evaluates the parameters of the connection attempt against the set of configured remote access policies. If the connection attempt matches a remote access policy (meets all of the conditions of the policy); has remote access permission; and meets all of the conditions of the account, the dial-in properties of the user account, and the remote access policy-profile settings, the connection attempt is accepted. If the connection attempt does not match any remote access policy, does not have remote access permission, or fails to meet all of the conditions of the account and dial-in properties of the user account and the remote access policy profile settings, the connection attempt is rejected. A connection attempt must be both authenticated and authorized before it is accepted.