Error 691 with 2003 Server

[Guest]

I have installed a 2003 server and active directory. And I have configured RRAS server for Dial-in connections. I have given the permission some users to access that server. And I registered that RRAS configuration with the Active Directory. Nevertheless, when I try to connect from any win2k or winXP client to that server , it gives a failure
"Error 691: Access was denied because the username and/or password was invalid on the domain."
I'm sure that the username and passwords are correct
What could be the reason? Is there anyone can help me please...

 

[Manjari Bonam [MSFT]]

Do you have AD on the same machine as the RRAS Server?
It is basically RRAS is not able to validate the user with the users in AD.

Change the "Auth" provider in the RRAS properties to point to RADIUS Server
if AD is on a different machine.

--
- Manjari
This posting is provided "AS IS" with no warranties, and confers no rights.

I have installed a 2003 server and active directory. And I have configured

RRAS server for Dial-in connections. I have given the permission some users
to access that server. And I registered that RRAS configuration with the
Active Directory. Nevertheless, when I try to connect from any win2k or
winXP client to that server , it gives a failure;

 

[Guest]

H

Yes, Active Directory and the RRAS server are on the same machine. And the RRAS configuration's been registered with the AD. also as RAS and IAS servers group member its been registered. But the problem still exists.
Is there another solution


----- Manjari Bonam [MSFT] wrote: ----

Do you have AD on the same machine as the RRAS Server
It is basically RRAS is not able to validate the user with the users in AD

Change the "Auth" provider in the RRAS properties to point to RADIUS Serve
if AD is on a different machine

--
- Manjar
This posting is provided "AS IS" with no warranties, and confers no rights

I have installed a 2003 server and active directory. And I have configure

RRAS server for Dial-in connections. I have given the permission some user
to access that server. And I registered that RRAS configuration with th
Active Directory. Nevertheless, when I try to connect from any win2k o
winXP client to that server , it gives a failure

 

[Robert L [MS-MVP]]

quoted form http://www.ChicagoTech.net
Error 691: Access denied because username and/or password is invalid on the
domain.

Resolution:
1) Verify the logon ID and password are correct.
2) Make sure the Include Windows logon domain check box is unchecked in the
Options tab of the dial-up connection's Properties dialog box.
3) Make sure the dial-up connection's security option is correctly
configured to use the Require secured password setting.
4) Delete all of the *.pwl files and reboot if you are using win9x.
5) Try another logon ID or create a new Logon ID because the profile may be
damaged.


--
For more and other information, go to http://www.ChicagoTech.net

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Robert Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

 

[Manjari Bonam [MSFT]]

Are you sure you gave the correct domain\username and password on the VPN
Server?

--
- Manjari
This posting is provided "AS IS" with no warranties, and confers no rights.

Hi

Yes, Active Directory and the RRAS server are on the same machine. And

the RRAS configuration's been registered with the AD. also as RAS and IAS
servers group member its been registered. But the problem still exists.

Is there another solution?


----- Manjari Bonam [MSFT] wrote: -----

Do you have AD on the same machine as the RRAS Server?
It is basically RRAS is not able to validate the user with the users in AD.

Change the "Auth" provider in the RRAS properties to point to RADIUS Server
if AD is on a different machine.

--
- Manjari
This posting is provided "AS IS" with no warranties, and confers no rights.

I have installed a 2003 server and active directory. And I have

configured
RRAS server for Dial-in connections. I have given the permission some users
to access that server. And I registered that RRAS configuration with the
Active Directory. Nevertheless, when I try to connect from any win2k or
winXP client to that server , it gives a failure;

"Error 691: Access was denied because the username and/or password

was
invalid on the domain."

I'm sure that the username and passwords are correct.
What could be the reason? Is there anyone can help me please...

 

[Guest]

How can I be sure for that?


----- Manjari Bonam [MSFT] wrote: ----

Are you sure you gave the correct domain\username and password on the VP
Server

--
- Manjar
This posting is provided "AS IS" with no warranties, and confers no rights
the RRAS configuration's been registered with the AD. also as RAS and IA
servers group member its been registered. But the problem still exists

Is there another solution

----- Manjari Bonam [MSFT] wrote: ----

Do you have AD on the same machine as the RRAS Server

It is basically RRAS is not able to validate the user with the user in AD

Change the "Auth" provider in the RRAS properties to point to RADIU

Serve
if AD is on a different machine

--

- Manjar
This posting is provided "AS IS" with no warranties, and confers n rights

I have installed a 2003 server and active directory. And I hav

configure
RRAS server for Dial-in connections. I have given the permission som user
to access that server. And I registered that RRAS configuration wit th
Active Directory. Nevertheless, when I try to connect from any win2 o
winXP client to that server , it gives a failure

"Error 691: Access was denied because the username and/or passwor

wa
invalid on the domain.

I'm sure that the username and passwords are correct
What could be the reason? Is there anyone can help me please..

 

[Guest]

Thank you but, I have tried all of them. it didnt work...


----- Robert L [MS-MVP] wrote: ----

quoted form http://www.ChicagoTech.ne
Error 691: Access denied because username and/or password is invalid on the
domain

Resolution
1) Verify the logon ID and password are correct
2) Make sure the Include Windows logon domain check box is unchecked in the
Options tab of the dial-up connection's Properties dialog box
3) Make sure the dial-up connection's security option is correctly
configured to use the Require secured password setting
4) Delete all of the *.pwl files and reboot if you are using win9x
5) Try another logon ID or create a new Logon ID because the profile may be
damaged


--
For more and other information, go to http://www.ChicagoTech.ne

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help

Robert Lin, MS-MVP, MCSE & CN
Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
http://www.ChicagoTech.ne
This posting is provided "AS IS" with no warranties

 

[Manjari Bonam [MSFT]]

Try to logon RRAS server with the domain credentials you are using for the
VPN server and see if you are successful.

You can use "runas" to test this out.

--
- Manjari
This posting is provided "AS IS" with no warranties, and confers no rights.

How can I be sure for that?


----- Manjari Bonam [MSFT] wrote: -----

Are you sure you gave the correct domain\username and password on the VPN
Server?

machine. And
the RRAS configuration's been registered with the AD. also as RAS and IAS
servers group member its been registered. But the problem still exists.

Is there another solution?

----- Manjari Bonam [MSFT] wrote: -----
Do you have AD on the same machine as the RRAS Server?

It is basically RRAS is not able to validate the user with the

users
in AD. RADIUS

Server
if AD is on a different machine.
- Manjari
This posting is provided "AS IS" with no warranties, and

confers no
rights.

configured
RRAS server for Dial-in connections. I have given the

permission some
users

to access that server. And I registered that RRAS

configuration with
the

Active Directory. Nevertheless, when I try to connect from any

win2k

or
winXP client to that server , it gives a failure; was
invalid on the domain."

[/QUOTE]

 

[Guest]

I tried it.. no it doesnt work. there must be some way to solve that easly..


----- Manjari Bonam [MSFT] wrote: ----

Try to logon RRAS server with the domain credentials you are using for th
VPN server and see if you are successful

You can use "runas" to test this out

--
- Manjar
This posting is provided "AS IS" with no warranties, and confers no rights

How can I be sure for that

----- Manjari Bonam [MSFT] wrote: ----

Are you sure you gave the correct domain\username and password on th

VP

Server
--

- Manjar
This posting is provided "AS IS" with no warranties, and confers n rights
machine. An
the RRAS configuration's been registered with the AD. also as RA and IA
servers group member its been registered. But the problem stil exists

Is there another solution

----- Manjari Bonam [MSFT] wrote: ----
Do you have AD on the same machine as the RRAS Server

It is basically RRAS is not able to validate the user with th

user
in AD RADIU

Serve
if AD is on a different machine
- Manjar
This posting is provided "AS IS" with no warranties, an

confers n
rights

configure
RRAS server for Dial-in connections. I have given th

permission som
user

to access that server. And I registered that RRA

configuration wit
th

Active Directory. Nevertheless, when I try to connect from an

win2

o
winXP client to that server , it gives a failure wa
invalid on the domain.

 

[Manjari Bonam [MSFT]]

IF you are not able to logon on the RRAS server, then I guess the creds
provided are invalid/not existing.

--
- Manjari
This posting is provided "AS IS" with no warranties, and confers no rights.

I tried it.. no it doesnt work. there must be some way to solve that easly..



----- Manjari Bonam [MSFT] wrote: -----

Try to logon RRAS server with the domain credentials you are using for the
VPN server and see if you are successful.

You can use "runas" to test this out.

--
- Manjari
This posting is provided "AS IS" with no warranties, and confers no rights.

How can I be sure for that?
----- Manjari Bonam [MSFT] wrote: -----
Are you sure you gave the correct domain\username and

password on the
VPN

Server?
- Manjari
This posting is provided "AS IS" with no warranties, and

confers no
rights.

machine. And
the RRAS configuration's been registered with the AD. also as

RAS
and IAS

servers group member its been registered. But the problem

still

exists.

Is there another solution?
----- Manjari Bonam [MSFT] wrote: -----
Do you have AD on the same machine as the RRAS Server?
It is basically RRAS is not able to validate the user with

the

users
in AD.

to

RADIUS confers no
rights. permission some
users configuration with
the

any

win2k password
was

 

[Manjari Bonam [MSFT]]

Try to logon locally on the DC with the credentials you are using with the
RRAS/VPN. If they work then there should be no problem with you VPN in.

--
- Manjari
This posting is provided "AS IS" with no warranties, and confers no rights.

My domain name is diasa.com.tr. Before, it was win2k Server and the domian

name was diasa.com. It's been changed as diasa.com.tr. But I've checked
everything that I know, everything seems ok. What can I do to check all
these credintials in server?