No access to Win2kServer shares?

[VPN User]

Hi,
VPN clients don't have any fileshare access to machines
which are Win2kServers (asks for username/password, then
denies access), although they can connect to Workstations
without any problem (asks for username/password, then
allows access).

The only exception to this is that the clients can see the
shares on the actual VPN gateway machine.

I've tried re-creating RAS from scratch, changing IP
address assignment to DHCP instead of RAS (and back again),
but nothing seems to cure the problem.

I guess it's a combination AD and RAS/VPN problem, because
the users are always being asked for their
username/password, where they shouldn't be (i.e. when they
are connecting to machines).

Any ideas on how to cure this?

TIA

 

[Robert L [MS-MVP]]

it could be cache credentials issue. give us some details and which username
and password you use.

--
For more and other information, go to http://www.ChicagoTech.net

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Robert Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

 

[Bill Grant]

Making a VPN connection is not the same thing as logging in to AD. Even
if you use AD to authenticate the connection, you do not automatically login
to AD. The client machines will still try to use the username/password of
their original local login.

Have you tried using the "login using a dialup connection" option on the
client? This will force a domain login when they connect.