Re: Domain resources in router to router VPN

From: Bill Grant (not.available_at_online)
Date: 09/06/04


Date: Mon, 6 Sep 2004 11:28:55 +1000


  The only way to make it all work tranparently would be to have all
machines in both sites members of the domain. How is it set up at the
moment? Is the branch office a workgroup?

<anonymous@discussions.microsoft.com> wrote in message
news:66a501c4939d$bbf439b0$a501280a@phx.gbl...
> I agree.
>
> This is a laptop that moves from one subnet of a network
> to another subnet of the network. The network is
> connected via a VPN. I want the laptop to log into the
> network even when connected to the remote subnet. The
> laptop appears to log in fine and I can access exchange
> server as well as send and receive messages. However I
> can't access the file shares on the server when connected
> to the remote side. The server in question is a SBS2003
> server so everything is self contained. Any tips on
> troubleshooting this?
>
> Thanks!
> Dave
>
> >-----Original Message-----
> > If a user logs into a workgroup using a
> workgroup/username/password
> >combination which exactly matches a valid
> domain/username/password on the
> >domain, the domain will allow access, because the
> credentials match.
> >
> > This will not work in reverse. A workgroup machine
> will not accept the
> >domain credentials.
> >
> ><anonymous@discussions.microsoft.com> wrote in message
> >news:054301c48fd6$4bcbb070$a401280a@phx.gbl...
> >> I should probably also mention that the laptop has the
> xp
> >> firewall disabled currently and also doesn't have any
> >> other firewall software installed. Also the server is
> >> not currently running ISA.
> >>
> >> Thanks again,
> >> Dave
> >>
> >> >-----Original Message-----
> >> > The VPN link just looks after the routing. What is
> >> your domain structure?
> >> >Is the remote site part of the domain? Is it a
> different
> >> domain? Or is it a
> >> >workgroup?
> >> >
> >> >
> >> >"Dave" <anonymous@discussions.microsoft.com> wrote in
> >> message
> >> >news:12db01c48f61$5f115e70$3a01280a@phx.gbl...
> >> >> I'm setting up a VPN for a client of mine and
> having a
> >> >> couple obscure issues and one of them seems to be
> >> related
> >> >> to Windows Server 2003 (SBS). Maybe somoone can
> point
> >> me
> >> >> to the right resource.
> >> >>
> >> >> Here is the problem:
> >> >>
> >> >> I have a VPN (router endpoint to router endpoint)
> >> >> successfully working between the main office and a
> >> remote
> >> >> site. The user has a laptop (xp pro sp1) that has
> been
> >> >> added to the domain and has worked at the office.
> Now
> >> >> when the laptop is at the remote site, I can log
> into
> >> the
> >> >> domain and check email from the exchange server over
> >> the
> >> >> vpn, but I just can't access any file shares on the
> >> >> server while logged into the domain. When I do
> this, I
> >> >> get a login prompt that fails no matter what user I
> put
> >> >> in.
> >> >>
> >> >> Here is the odd thing. If I don't log into the
> domain
> >> >> (just logon as a user on the local machine) then I
> am
> >> >> able to access file shares. Start Run
> \\server\share.
> >> >> When prompted, I put in the exact same user and
> >> password
> >> >> that I had tried before when logged into the domain
> and
> >> >> voila.
> >> >>
> >> >> So something is happening when I log on to the
> domain
> >> >> that is prohibiting me to access file shares via the
> >> VPN.
> >> >>
> >> >> The vpn routers are connecting separate subnets and
> >> >> netbios is supposed to be being passed over the vpn
> by
> >> >> the endpoints.
> >> >>
> >> >> Thanks for any tips,
> >> >> Dave
> >> >>
> >> >> Oh, one other issue that may or may not be related
> is
> >> >> that the same machine won't browse the internet via
> >> http
> >> >> while connected to the VPN at the remote site. I
> can
> >> >> connect to other internet resources (ftp, telnet,
> etc)
> >> as
> >> >> well as connect to a web server at each subnet of
> the
> >> >> VPN, but just no http via the internet. This
> occurs
> >> >> when logged into the network on not on this machine,
> >> but
> >> >> it doesn't occur when moved to a different network
> (not
> >> >> on the vpn) Also, When I attached my personal
> laptop
> >> to
> >> >> the network I was able get full internet access and
> >> >> access to file shares accross the vpn (I wasn't
> logging
> >> >> into the domain at the time).
> >> >>
> >> >> Thanks again for any help!
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >



Relevant Pages

  • Re: SBS 2003 Win XP/2000 Pro Clients TCP/IP Problems
    ... network and no DHCP services provided by any machines still on the network. ... Check all machines for DNS entries. ... It really sounds like a IP Address conflict the way the server stops ... > PCs, 3 of which are running Windows XP Pro, the rest 2000 Pro. ...
    (microsoft.public.windows.server.sbs)
  • Re: Vista, SBS 2003 and RAS not working
    ... We have a windows SBS 2003 server – straight out of the box, ... The VPN connection between your computer and the VPN server could not ... You mention that the clients are Vista machines, which means that their built-in firewall works on outgoing messages as well as incoming ones, and the firewall needs to be told that outgoing PPTP VPN connections should be allowed. ... Computers don't need to be joined to the domain to connect by VPN, by the way, so you can use other remote computers for testing, it's just that only domain machines get access to all network resources easily. ...
    (microsoft.public.windows.server.sbs)
  • Re: Connecting to two different domains
    ... "Marian Gutu" wrote: ... Plug your laptop on the network. ... I have Active Directory Set-up on my Windows 2003 home server. ...
    (microsoft.public.windowsxp.general)
  • Re: Problem getting a new XP computer to join an NT 4.0/Win 98 domain
    ... > the computers and the file server with the goal of getting ... > If you scan Network Neighborhood for the Entire Network after ... > booting, there are 3 workgroups: ... > machines to see and map to shares on the NT file server. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Problem getting a new XP computer to join an NT 4.0/Win 98 domain
    ... > the computers and the file server with the goal of getting ... > If you scan Network Neighborhood for the Entire Network after ... > booting, there are 3 workgroups: ... > machines to see and map to shares on the NT file server. ...
    (microsoft.public.win2000.networking)

Loading