cannot access UNC paths over VPN

[Guest]

I have a domain laptop that is used on both the local corporate LAN and over
a dynamic VPN tunnel. Outlook and other apps do work over the VPN, but we
are experiencing issues with accessing UNC shares on a Windows 2000 server,
particularly under this user's name and profile. When the user attempts to
access his home folder e.g. (\\servername\share\username), he will receive a
message alerting him that the username and password have already been tried
and failed, and to ensure that the domain controller that authenticated him
is available. To ensure that an authenticating domain controller was
available over the VPN I not only rejoined the workstation to the domain over
VPN, but changed his password via Remote Desktop and successfully logged him
in over VPN.

It seems that as the domain admin I was able to look at UNC shares, but
under his account I cannot. I have also received this message:

The system detected a possible attempt to compromise security. Please
ensure that you can contact the server that authenticated you.

The share that is most critical is the home folder assigned to him via AD,
and has no problems on the local LAN. Furthermore this folder is
synchronized with My Documents and logon and logoff, and the errors and
authentication prompts take place when trying to synchronize. If he
synchronizes in the office, the data will be available when the unit has no
TCP/IP connection, but as soon as he gets on the VPN the My Documents folder
is empty.

Please note that I recently installed 2 Windows 2003 domain controllers. I
am not seeing any errors from the AD integrated DNS zone. There are
currently 2 W2k3 DC's and 2 Win2k DC's running in Windows 2000 native mode.
I have made all machines Global Catalogs as there seemed to be some issues
with that too. Hope this was readable, let me know what you think.

 

[Guest]

I am quite new to the "vpn world" but have discovered that if on the vpn
connection you have the "use remote gateway" checkmarked...then I can access
all mapped network folders served up on from the domain...BUT I loos the
ability to connect to any of the network resourses in the "branch office"
so I can now access my Word files but while on the VPN connectionI cannot
print to the networked laser in my office.....I have had to use
synchronization for my Outlook and my "user folder" ( U: drive on the corp
domain) and then after syncing..... I disconnect the VPN and then I can
print..............for me its a gateways issue

 

[Guest]

Thanks Dan but I'm pretty sure the gateway's intact, it's a shared internet
connection on his side anyway so I can't really use the remote gateway. I
sent the user home with an updated hosts file for all critical servers,
thinking it's a dns issue. I just wish MS would pick something and stick with
it..is it netbios or is it DNS or is it mixed? Logon works, Outlook works,
UNC shares don't..etc. I also kicked up the MTU on the interfaces. If it
helps I'll post, thanks for your input.