Dial-up VPN routers that are not in the same domain

[Steve]

We are trying to setup up two dial-up VPN servers. One
server is in a domain and the other is in a workgroup. Do
they have to be in the same domain to work properly?

 

[Bill Grant]

That depends on what you expect them to do. A VPN server doesn't have to
be in a domain. You can authenticate to the local SAM database of the
workgroup server. What exactly are you aiming to do?

 

[Guest]

We are trying to have a workgroup from one site, do a VPN
connnection to a domain at another site and browse the
private network. These aren't replication sites.

 

[Bill Grant]

To get this to work well, you need to set up a router to router VPN
connection. RRAS can handle this, and it will work between a domain and a
workgroup. You may have problems with name resolution and browsing though.
Using a DC and/or master browser and/or WINS/DNS server as a router can
cause problems, because the server becomes multihomed.