This thread also just helped me in a Production down scenario, so thanks.
Someone added a user to the Remote Access tab under Users and Groups, effectively locking out all of our normal remote (via UAG) users. Checked the tab after reading this thread and sure enough... removed that individual user and all was resolved. (Leaving it blank means everyone has access)