Re: Account is locked when using remote access

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Dave Nickason [SBS MVP] (gwdibble_at_NOSPAM.frontiernet.net)
Date: 11/02/04 

Date: Tue, 2 Nov 2004 18:22:04 -0500

Now that you're on 2003, please post in microsoft.public.windows.server.sbs
for better results (this is the 4.5 group).

I haven't had this exact problem (lockout), but I've seen the errors when
people VPN in from home. One thing that seems to have worked is to create a
profile on the home computer with the exact same username and password as
the user's office account. When I would log in from home using my regular
profile, I'd see at least a few username/password errors even though I know
I did not enter any passwords incorrectly. However, by creating a separate
profile with credentials matching the office, that problem is gone. For
home users with kids (or careless adults), this may have an added benefit of
segregating your office LAN from their high-risk activities. And, you may
find yourself prompted for a password less often over VPN.

"David McCormack" <nospam@zamang.co.uk> wrote in message
news:1099426885.31541.0@echo.uk.clara.net...
> We have just upgraded our network from a Windows 4.5 SBS machine to a
> Windows 2003 SBS Premium box. So far everything seems to be going well
> with one expection.
>
> We have an external router that handles our VPN connections and network
> firewall.
>
> I'm able to connect to the VPN and then connect remotely via Remote
> Desktop Connection to my office workstation. Almost as soon as I do this
> though, my user account is locked and I have to login as Administrator to
> unlock the account so that I can continue working.
>
> Every five minutes or so after that my account is then locked again.
>
> Looking on Google I've found a couple of notes about adding the remote
> machine to the domain - but generally the machines that are used are home
> machines or remote users machines.
>
> I've looked in the Event Log and is states incorrect username / password,
> but I know that my details are correct.
>
> Does anyone know of any whitepapers or knowledge base articles that might
> be of help? Everything I've found so far works on the assumption that the
> Windows SBS 03 machine is handling the VPN connections.
>
> Many thanks in advance,
>
>
> David McCormack

Relevant Pages

  • Re: Requiring specific computer to log on
    ... Consider that if you set all your remote machines to use a single account, ... each VPN computer you have increased your "surface area". ... Double click the logfile. ...
    (microsoft.public.windows.server.sbs)
  • Re: How secure is my VPN?
    ... If you can't go down the hardware VPN route (and if you can afford it you ... strong/complex passwords for VPN. ... Administrator account, even if it's not in the Mobile Users group. ... Remote Access Account lockout should also be configured, ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote Access and ISA Server in SBS 2003?
    ... I am glad to hear the Remote Access Wizard is working fine now. ... there is no difference in VPN between SBS 4.5 and SBS ... Error Message: VPN Connection Error 800: Unable to Establish Connection ... the external NIC of the SBS Server. ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN Problem with a domain account versus local computer account
    ... logon domain remotely. ... allow VPN client access, and there is a client computer that is configured ... Enable remote access on domain user accounts ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS VPN setup?
    ... Do you really think it is easier to set up a RWW in SBS 2003 R2 Standard as you claim? ... Note that almost all routers are not designed to allow more than one PPTP VPN from the same remote IP address, (the PPTP protocol does allow for the possibility of multiple tunnels, but they must share a control channel, which means it can't be done from separate remote computers behind one NAT router without fairly exotic packet handling) so if you need multiple users at one site you really need site-to-site VPN. ...
    (microsoft.public.windows.server.sbs)