Re: They are currently no logon server to service the request

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 04/29/04


Date: Thu, 29 Apr 2004 19:05:34 +0200

hotgal wrote:

> Hi
>
> I have a Windows 2000 Server and Windows 2000 Professional
> clients in my LAN environment. In my remote location I
> have Windows 2000 Servers along with Windows 2000 Pro
> clients. I have a LAN to LAN VPN setup between the two
> offices. I tried to create shares on my local computer to
> access the resources in the remote location. However I
> keep getting the error "They are currently no logon server
> to service the request"
Hi

Most likely caused by packet size limitations in the VPN connection.
Active Directory (with default settings) doesn't function very well
when max packet size is less than 2048 bytes (I would think your VPN
connection have a packet size limitation of approx. 1700 or less).

To verify this, try the following ping command (forcing it to use
a packet size of 2048 bytes:

ping -l 2048 -w 5000 <DC name or IP>

You should get "Destination host unreachable" if my suspicion
is correct.

This ping command should work (if not, you have other problems):

ping -l 0 -w 5000 <DC name or IP>

A workaround is to follow the instructions in this article:

How to force Kerberos to use TCP instead of UDP
http://support.microsoft.com/?scid=kb;en-us;244474

On your computers, set MaxPacketSize to 1 and see if helps...

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/community/scriptcenter/default.mspx


Relevant Pages

  • Re: proper naming of a domain
    ... If your IP address at the remote location where you are trying to VPN from is 192.168.0.X and the IPs on the LAN you are trying to VPN to are also 192.168.0.X then you will have problems with navigating the LAN you are trying to connect to ... > The primary reason for not being able to see resources/browse etc during a VPN is that the IPschema of remote network is the same as the LAN that you are connecting to. ...
    (microsoft.public.windows.server.sbs)
  • Re: Connecting to the Companies LAN
    ... > Linksys RV082 router. ... > able to access the LAN from a remote location. ... In XP go to start> Help> search and type in VPN ...
    (microsoft.public.windowsxp.network_web)
  • Re: Outlook email sent from LAN or VPN? Can you tell?
    ... Exchange MVP 2008 ... LAN or from a remote location using VPN and Outlook to ...
    (microsoft.public.exchange2000.admin)
  • Re: VPN routing from NAT to NAT
    ... if you are willing to lose all LAN connectivity while on ... the VPN, you can perhaps coexist on the same subnet.. ... If you are both using the same private network for your LANs, ... >VPN adapter, because that address is now bound to the VPN adapter and ...
    (microsoft.public.windowsxp.work_remotely)
  • We have lots of users with SonicWalls for VPN connectivity in to FW-1, possible major security hole
    ... With default rule disabled: Disable default Src: LAN Dst: ALL ... The firewall WAN address is 24.184.168.52 ... A NT server on the internal LAN is 192.168.1.22 ... why is my internal server responding to this packet as a "Destination ...
    (Incidents)