Install and Enable the Routing and Remote Access Service

Applies To: Windows Server 2008

The Routing and Remote Access service in the Windows Server® 2008 family provides:

  • Virtual private network (VPN) remote access and dial-up services.

  • Multiprotocol LAN-to-LAN, LAN-to-WAN, VPN, and network address translation (NAT) routing services.

You install the Routing and Remote Access service by using the Add Roles Wizard.

Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (

To install the Routing and Remote Access service

  1. In the Server Manager main window, under Roles Summary, click Add roles.

    -- OR --

    In the Initial Configuration Tasks window, under Customize This Server, click Add roles.

  2. In the Add Roles Wizard, click Next.

  3. In the list of server roles, select Network Policy and Access Services. Click Next twice.

  4. In the list of role services, select Routing and Remote Access Services to select all of the role services. You can also select individual server roles.

  5. Proceed through the steps in the Add Roles Wizard to complete the installation.


After you complete the installation, the Routing and Remote Access service is installed in a disabled state. To enable and configure the remote access server, you must be logged on as a member of the Administrators group.

After installing the Routing and Remote Access service, you need to enable the service to configure your server for routing and remote access.

To enable the Routing and Remote Access service

  1. If this server is a member of an Active Directory® domain and you are not a domain administrator, instruct your domain administrator to add the computer account of this server to the RAS and IAS Servers security group in the domain of which this server is a member. The domain administrator can add the computer account to the RAS and IAS Servers security group by using Active Directory Users and Computers or by using the netsh ras add registeredserver command. If this server is using local authentication or is authenticating against a RADIUS server, skip this step.

  2. Open Routing and Remote Access.

  3. By default, the local computer is listed as a server.

    To add another server, in the console tree, right-click Server Status, and then click Add Server.

    In the Add Server dialog box, click the applicable option, and then click OK.

  4. In the console tree, right-click the server you want to enable, and then click Configure and Enable Routing and Remote Access.

  5. Follow the instructions in the Routing and Remote Access Server Setup Wizard.

Additional references