ISA 2004 as a VPN Server -- Plz help

[Maaz]

Hello Gurus,
vpn clients are unable to connect to VPN server(ISA 2004, Win 2003, with SP1), and following eror recieves:
Error 800: Unable to establish the vpn connection. The VPN server may be unreachable or Security parameters may not be configured properly for this connection

I configure ISA server 2004, as VPN server.
ON ISA 2004
-----------
Error message from Event Viewer:
Event Type: Error
Event Source: Microsoft Firewall
Event Category: None
Event ID: 14102
Date: 2/25/2006
Time: 10:41:59 PM
User: N/A
Computer: SERVER101
Description:
Failed to save the Routing and Remote Access service configuration in the registry. The registry key: System\CurrentControlSet\Services\RemoteAccess\Parameters\Ip, registry value: - could not be accessed for writing. The VPN configuration of the server is incomplete.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 05 00 00 00

Plz help
Regards
Maaz

[Igor Karasik]

Maaz,
check that Network Service account had FULL control for System\CurrentControlSet\Services\RemoteAccess\Parameters\Ip key.

P.S. Just in case you didn't see it before: there is a great article "Enabling the ISA Server 2004 VPN Server"
http://www.isaserver.org/articles/2004vpnserver.html
Also, forum on this site http://forums.isaserver.org/ help me a lot with different ISA 2004 issues.

[Maaz]

Thanks
How can I check it that
Network Service account had FULL control for System\CurrentControlSet\Services\RemoteAccess\Parameters\Ip

Igor i m going to check the links.

Regards
Maaz

[Igor Karasik · Accepted solution]

Open "regedit.exe" (registry editor) from command prompt, go to My computer\HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteAccess\Parameters\Ip,
right click on IP key and select "Permissions". In "Permissions for IP" window check that Network Service account had FULL control.

[Maaz]

SP1 of ISA 2004 is the remedy/solution
Thanks n Regards
Maaz