VPN Access

I am trying to setup VPN access for 2 users.
Description: I have RRAS setup on Windows 2000 SP2 server that is a member of NT4 domain. All appropriate users have the box checked to “grant dialin permission” in NT4 user manager. VPN works finefor users who are members of DomainAdmins. Does not work for other users. I have tried multiple strategies for Remote Access Policy under W2K – in each case I can successfully block access from all users and then successfully allow access, but only to DomainAdmins.