Your company hires 10 new employees.
You want the new employees to connect to the main office through a VPN connection.
You create new user accounts and grant the new employees they Allow Read and Allow
Execute permissions to shared resources in the main office.
The new employees are unable to access shared resources in the main office.
You need to ensure that users are able to establish a VPN connection to the main office.
What should you do?

A.
Grant the new employees the Allow Access Dial-in permission.

B.
Grant the new employees the Allow Full control permission.

C.
Add the new employees to the Remote Desktop Users security group.

D.
Add the new employees to the Windows Authorization Access security group.

Explanation:
http://technet.microsoft.com/en-us/library/cc738142%28v=ws.10%29.aspx
Dial-in properties of a user account
The dial-in properties for a user account are:
Remote Access Permission (Dial-in or VPN)
You can use this property to set remote access permission to be explicitly allowed, denied,
or determined through remote access policies. In all cases, remote access policies are used
to authorize the connection attempt. If access is explicitly allowed, remote access policy
conditions, user account properties, or profile properties can still deny the connection
attempt.