This article is outdated and may not work correctly for current operating systems or software.
This guide explains how to setup a PPTP VPN using Windows Server 2012. We will be using the Remote Access role to setup a VPN and give individual users permission to use it.
To install the Remote Access role, open Server Manager, click "Manage", then select "Add Roles and Features". Depending on your setup, you might need to use another installation type. However, if you just want to install Remote Access on the local server, select "Role-based or feature-based installation" and click "Next".
Again, depending on your setup, you might need to change the destination server. If you still just want to install Remote Access on the local server, simply select the local server from the server pool and click "Next".
Select the "Remote Access" role and click "Next". There are no features that need to be installed, so just click "Next" when prompted.
When asked which role services you want to use for Remote Access, select "DirectAccess and VPN (RAS)" and "Routing". Click "Next".
Click "Install" to install Remote Access and IIS. IIS is a requirement for Remote Access to function.
In order to setup "Routing and Remote Access", open the application with the same name.
In the sidebar, you will see your server's name. Right-click it to setup "Routing and Remote Access" on this server. Click "Configure and Enable Routing and Remote Access". This will open a wizard which will guide you through the process of, in this case, setting up a VPN. Click "Next" after you've read the introduction.
Select "Custom configuration" when asked which service you want to enable on this service, then click "Next". The service that you want to enable is "VPN access", so check it and click "Next".
You will now see a summary of what you're going to configure. If this is correct, click "Finish" to let "Routing and Remote Access" set the VPN up for you.
When asked to start the service, click "Start service". This will enable the "Routing and Remote Access" service. Wait for the service to be started.
If you use a domain on your network, you can enable VPN access for individual users from Active Directory. Open "Active Directory Users and Computers", and navigate to the user for which you want to allow VPN access. Edit this user, then go to the "Dial-in" tab. Under "Network Access Permission", select "Allow access". The user will now be able to connect to your VPN server.