Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address The function of this service is to provide a "demand dial" type of functionality. In a high security environment, it is preferred that any remote "dial" connections (whether they be legacy dial-in POTS or VPN) are initiated by the user, not automatically by the system. Default: Manual. Counter Measure: The recommended state for this setting is Disabled. Potential Impact: Dial on demand functionality will no longer operate - remote dial-in (POTS) and VPN connections must be initiated manually by the user. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Remote Access Auto Connection Manager (2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasAuto!Start