RRAS on w2003 id 20014

[mark]

Hi I have a mixed mode NT4/2003 domain, our NT4 Ras server failed and we
installed a new one, NT4 server is now not an option due to the 2003 AD
being in place.

The RRAS is purely a rack of 8 usrobotic modems on a multi serial card.

The AD Domain works perfect apart from RAS.
The Server setup with RRAS is not a DC, just a member.
The Server has been added to the RAS and IAS Group

When a client connects they get the error
Error 691: Access denied because username and/or password is invalid on
the domain


and the server logs
Event ID: 20014
Source: RemoteAccess
Type: Warning
Description: The user %Name% has connected and failed to authenticate on
port %Name%. The line has been disconnected

These are the same for users, and domain admins.

The only thing I can find on the net, and in technet is the article 191854
which has the exact error, but relates to just NT4 rras.

Any pointers?

 

[Bill Grant]

The security settings are a bit tighter in W2k3. What sort of clients
are trying to connect? See KB 826157 .

 

[mark]

The clients are XP pro and w2000 pro, logged in with dom admin rights

regards

 

[Bill Grant]

Then it is probably a remote access policy problem. In Domain Users and
Computers, set the users to to the remote access policy option. Then set the
remote access policy to allow access (subject to any restrictions you care
to configure).

 

[mark]

I have just re-checked my settings. The RRAS server has a policy set that
allows all users full network access 24/7