VPN Server on Domain

[Misslemike]

Hi, I am an instructor with a VPN server joined to my
Windows Server 2003 domain and users in the Domain can VPN
in for class folders. It used to be set up as a Workgroup
VPN Server. But after joining it to the domain, I forgot
the night instructor will be using his own drive and my
Domain Contoller will be down at nights. So, I am not able
to VPN into the vpn server now because I get an
authentication error with any of the user accounts I used
before. I guess I will have to unjoin it from the domain,
but is there a way to set the VPN server so that a user
can still vpn in when the DC is down and by keeping it a
member of the domain? Thanks

 

[Doug Sherman [MVP]]

Users cannot logon to the domain if there is no domain controller to
authenticate them.
On the VPN Server you could logon to the Local machine instead of the domain
without unjoining it. However, you would have to configure local user
accounts for VPN clients and give them dial-in access.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

 

[Steven L Umbach]

I assume you have local accounts on the rras server that match the domain accounts,
but joined it to the domain. It "might" work if you remove it from the RAS and IAS
servers group in AD Users and Computers but you would have to add it back when you
want it to authenticate for domain users again. The link below describes this a
it. --- Steve

http://support.microsoft.com/default.aspx?kbid=227747 --- see the section for
"resolution".

 

[Lanwench [MVP - Exchange]]

Why will your domain controller be down at night?

 

[Guest]

Thanks Steven, I will give it a try. I do have local users
already configured and they will not work on the VPN
server anymore since I joined it to the domain. I wish the
night instructor would let the domain controller run, But
I guess I could leave the VPN server as a standalone if I
have to. But I would like to use it in the domain and as a
standalone when the DC is off.