Our laptop users use the Cisco VPN client to connect to our Cisco PIX
515E firewall. Once connected, they can get their Exchange email,
they can run our SQL Server based applications, but they cannot access
the file system on any of the servers.

We have a Windows 2000 Server domain and Windows 2000 on the laptops.
When not in the office, our users logon using cached credentials (ie.
they don't logon to the local machine, they leave the domain name in
the 'Log on to' field). Interestingly, if we change that to Log on to
the local machine, then we can access the network shares. I don't
want to have the users changing that all the time. There are a lot of
reasons why not.

The error we get when trying to connect to a network share is "There
are currently no logon servers available to service the logon
request".

The Cisco VPN client is version 4.0.3. I have tried checking "Enable
start before logon" but that didn't make any difference.

Does anyone have any ideas on what could be wrong here?

Thanks in advance,
Chris

I had a similar problem until I configured 2 of my domain controllers with
IAS. It acts as a RADIUS server for non-active directory aware devices like
the PIX. Enable AAA in the PIX and setup the IP's of your IAS box(es). Setup
the PIX device in IAS and they should start authenticating based upon your
dial-in properties.

"Chris" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Our laptop users use the Cisco VPN client to connect to our Cisco PIX
> 515E firewall. Once connected, they can get their Exchange email,
> they can run our SQL Server based applications, but they cannot access
> the file system on any of the servers.
>
> We have a Windows 2000 Server domain and Windows 2000 on the laptops.
> When not in the office, our users logon using cached credentials (ie.
> they don't logon to the local machine, they leave the domain name in
> the 'Log on to' field). Interestingly, if we change that to Log on to
> the local machine, then we can access the network shares. I don't
> want to have the users changing that all the time. There are a lot of
> reasons why not.
>
> The error we get when trying to connect to a network share is "There
> are currently no logon servers available to service the logon
> request".
>
> The Cisco VPN client is version 4.0.3. I have tried checking "Enable
> start before logon" but that didn't make any difference.
>
> Does anyone have any ideas on what could be wrong here?
>
> Thanks in advance,
> Chris