Grant dial in / network access permissions to ADuser account
# Check for Network Access Permissions.
# If no result/empty; it is set to "Control access through NPS Network Policy":
Get-ADUser john.doe -Properties msNPAllowDialin -Server dc.contoso.com
# Set Network Access Permissions to Allow Access:
Set-ADUser john.doe -replace @{msnpallowdialin=$true} -Server dc.contoso.com