Delegate RRAS

Group Policy. That is what you will have to modify to allow a certain non-Administrator user to modify RRAS.
(Note: I am gonna assume you have Active Directory running on your LAN, and your RRAS server is either a member server in your AD domain, or the RRAS server itself is a Domain Controller in the AD domain. 'cause that is necessary for this to work.)

On your Domain Controller, click Start -> Settings -> Control Panel -> Administrative Tools -> Domain Security Policy.
This will bring up the Group Policy settings for your domain. Expand Windows Settings -> System Services. Scroll down the list of services until you see Routing and Remote Access. Double-click this one.
This policy will not be enabled by default; click the "Define this policy setting" check box. Below that, in the "Select service startup mode", select Automatic to make RRAS start on the server when the server boots up.
Now, click the Edit Security button.
This brings up a "Security for Routing and Remote Access" window. In this window is where you will add the user account you want to allow rights to the RRAS service. There are 5 rights available: Full Control; Read; Start, Stop and Pause; Write; Delete.
(In my opinion, I would give the user the Start, Stop and Pause right. That lets the user start, stop, pause and Read permissions in RRAS.)

Now, the EVERYONE group will be listed as having Full Control rights to RRAS. I would change that. I would remove EVERYONE, and add your user.
Give the user the rights you want them to have for RRAS.
After that, I would also add any Administrators (or the Domain Admins group) and give them Full Control.

After that, click OK on all windows to save all changes.

That's it! The next time the RRASserver has its Group Policy settings refreshed (happens every once in a while, also on login), the user will have rights to do stuff to RRAS.

hope this helps

Ok, I already did that before I ask the question.
I have the ff observations:

1) RRAS requires BOTH administrator and server operator permissions (if the administrator is excluded from the server operators group)

2) The server operators group alone cannot open the RRAS snap-in. It says the user has insufficient permission.

3) The administrator (if excluded from the server operators group) can open the RRAS snap-in BUT it seems it has a read-only permission. Under server status, stateis "access denied".

4) If I include user to both the administrators and server operators group, he has access to RRAS.

5) If I include administrator to server operators group, it has access to RRAS.

I have done the ff:

Tweaked Domain Controller Security Policy and Domain Security Policy to give full access to both Administrators and Server Operators.

Tweaked Active Directory Sites and Services to delegate RRAS service to both Administrator and server operators.

I need to know how I can delegate control of RRAS to server operators group only (and not part of administrators).

Thanks for your help.

Allan

Thanks Joseph but I've tried adding server operators group to both (profile single process and profile system performance) to no success. I've also added server operators group to other user rights such as increase scheduling priorities, etc. but tono luck either.

My boss would be taking over the administrator account on the server (only he knows the password) and without administrative privileges, we (the server operators) must find a way to access the Routing and Remote access snap-in without calling our boss for the password everytime there is a problem with the RRAS.

This wasn't a matter of user profiles and access rights but rather a question of builtin-group rights. I performed the following to answer the query:
1)I logged on as Administrator to the Domain Controller
2)I created a new group under Builtin called Server Controllers
3)I assigned Universal to the Group Scope
4)I assigned Distribution under the Group Type
5)I created a new user called chuck.
6)I added chuck as the only member to the new group Server Controllers
7)I logged on as chuck
8)I opened the Routing And Remote Access window under the Administrative Tools
9)I was able to perform all operations as if I was Administrator

Hope this solves the query.

The MMC can be used by a system administrator to create special tools to delegate specific administrative tasks to users or groups such a the Server Operators.

RRAS tasks can be saved as MMC console files, and then these custom tools can be sent by e-mail, shared in a network folder, or posted on the Web. They can also be assigned to users, groups, or computers with system policy settings.

A console file and can be created from scratch when using the new task delegation features in the MMC. One can add windows to provide different administrative views in the console. Also, creating a console file for another user, it's useful to provide a very simplified view with only a few tasks available.

Hope this will solve your delegation issue.