Error 649

[qh]

Hi, I've configured the RRAS to authenticate client(L2TP)
using third party CA, I got Error 649: The account does
not has promission to dial in. But this user was added to
a group with promission already, and this user is remote
access enabled already at Active Directory. What's the
problem? Thanks

 

[Robert L [MS-MVP]]

quoted from http://www.ChicagoTech.net
Error 649. The account does not have permission to dial-in.

Resolution:
1) This error can occur if the user name is the same as the domain name.
2) This error can occur if the username is 'system'.
3) This error can occur if dialing in to a Windows NT Remote Access Server
and your password has expired.
4) Make sure the user is allowed to dial-in.
5) Check PPTP filtering. For the test, disable PPTP filtering on the server
(Net Stop RASPPTPF), and see if you can establish a non-filtered connection.
--
For more and other information, go to http://www.ChicagoTech.net


Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Robert Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.