Re: Windows 2003 RAS Error 691

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: steve (steve_at_discussions.microsoft.com)
Date: 09/10/04


Date: Fri, 10 Sep 2004 16:21:03 -0700

Thank you for replying Robert but I have already eliminated those
possibilities.

What is happening is the connection is made but it can not authenticate
against the AD. I think I may try the trick in the registry to allow LANMAN
authentication and see if that works.

"Robert L [MS-MVP]" wrote:

> quoted from http://www.ChicagoTech.net
> Error 691: Access denied because username and/or password is invalid on the
> domain.
>
> Resolution:
> 1) Verify the logon ID and password are correct.
> 2) Make sure the Include Windows logon domain check box is unchecked in the
> Options tab of the dial-up connection's Properties dialog box.
> 3) Make sure the dial-up connection's security option is correctly
> configured to use the Require secured password setting.
> 4) Delete all of the *.pwl files and reboot if you are using win9x.
> 5) Try another logon ID or create a new Logon ID because the profile may be
> damaged.
>
>
> --
> For more and other information, go to http://www.ChicagoTech.net
>
> Don't send e-mail or reply to me except you need consulting services.
> Posting on MS newsgroup will benefit all readers and you may get more help.
>
> Robert Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
> http://www.ChicagoTech.net
> This posting is provided "AS IS" with no warranties.
>
> "Steve" <Steve@discussions.microsoft.com> wrote in message
> news:E60C7F94-220F-4545-AB5C-32B3505AC14F@microsoft.com...
> >I am at my end here. I have a 2 server AD domain both with Windows 2003
> > Standard. I have been trying to get remote access working so we can
> > migrate
> > off of NT. I keep getting an Error 691 whenever I try and connect via VPN.
> > I
> > have tried setting up the RRAS on either DC and I keep getting the error
> > on
> > each. The only thing I can think of is I had an Enterprise CA on my
> > seconday
> > DC so I could do IPSec but I have removed that. I really can not go
> > without
> > VPN capabilities so I need to get this resolved. The weird thing is that
> > the
> > first time I tried to set up RRAS on my main DC it worked fine then it
> > just
> > stopped without warning. I be content with the ability able to use PPTP
> > but I
> > can't even do that.
>
>
>



Relevant Pages

  • RE: RRAS with PPTP connections security
    ... Authenticate from there ... Onderwerp: RE: RRAS with PPTP connections security ... authentication to using a private side Win2000 RRAS server. ...
    (Focus-Microsoft)
  • Re: ras server authentication connected to hotspot gateway
    ... ISS4000 hotspot gateway with builtin authentication database. ... Our LAN IP for the gateway is 10.59.1.1 & the rras server nic ... and this assumes that the hotspot gateway is RADIUS ... RRAS can authenticate against AD or the local SAM database. ...
    (microsoft.public.internet.radius)
  • Re: Autenication through a wirewall
    ... we can have RRAS Server not in a domain but still authenticate domain ... Setup a RADIUS server on the domain and configure RRAS to talk to RADIUS ...
    (microsoft.public.win2000.ras_routing)
  • Routing and Remote Access Server Setup.
    ... After enabling my RRAS, when I dial in using modem, the ... modem attached to the RRAS will not authenticate the user ...
    (microsoft.public.isa.vpn)