Stop Stopping That!
Sometimes Super IT Guy's job is to heft a boulder out of the tunnel so people can get to work. If his x-ray vision isn't shining in the right direction, he may not notice every rock that can block trafficsuch as packet filters on the RRAS server. Chris Wolf mentions another biggie in Troubleshooting Microsoft Technologies: The Ultimate Administrator's Repair Manual (Addison-Wesley, 2003, ISBN 0321133455); RAS clients may not be getting DNS or gateway informationor the right informationfrom the RAS server using a static pool of addresses: "When a RAS server uses its own static pool of addresses to provide IP addresses for clients, it gives the clients its own DNS and gateway addresses to use as well. If these addresses are improperly configured on the RAS server, the RAS clients will have problems accessing network resources."
That's a good one to clean up at the source! While you're at it, make sure that the server has VPN ports available and plenty of IP addresses to hand out.