VPN issues with RAP

I have an account that I am tring to use in VPN. Works fine when i use the "allow access" option on the account dialog box. Unfortunately, if i push the "control access with Remote Access Policy" it will move the option back to deny access. Couldn't seem to find a solution. I'm not sure where I should be looking, cause i have no idea why the option would move back. ty.