Teach you to grant domain user restricted network administration permissions through Group Policy

To achieve the requirements:

1. Grant permissions to some domain users to create a network connection (PPTP-VPN) or multiuser dial-up connection that is used by multiple users.

For this requirement, the NCP group is used here. The NCP group can be implemented as a member of the network Configuration Operators group if you want to allow some people to do some network administration tasks, but do not want them to be administrators.

Before configuration:

When these domain accounts attempt to create a multiple-user shared VPN join, the following information is prompted:

No limit creation.

This prompts for an administrator password, which is not appropriate for ordinary domain users.