VPN SSL (-455 acess denied) when i enable Log On To in AD

I am enabling the "Log On To" option inside AD, but when I do this the VPN user will show the -455 access denied error. If I allow the user to authenticate on all machines as is the default, in this case the user can authenticate in the VPN Has anyone ever had this mistake?