VPN access from a different domain

[Brian Steele]

Hi Everyone:

I've got two AD forests on my LAN, let's call them Forest A and forest B. A
one-way trust is set up between them so that B trusts A. I've got a server
in B set up to provide incoming VPN connections in B. I'd like to configure
it so that authenticated users from A can use this server to gain VPN access
to our LAN? I've checked the MS KB site, and it mentions a procedure that
involves adding the server name to the "RAS and IAS Servers" group in A.
However, when I try to do this via AD Users and Groups, the the server's
name isn't visible, so I can't add it! What am I doing wrong?


Brian

 

[Brian Steele]

I'm getting the following error when users from A try to use the VPN:

"Error 930: The authentication server did not respond to authentication
requests in a timely fashion"

And yes, the A accounts, at least the one I'm trying to use, are set to
allow dial in / VPN connections.


Regards,
Brian