RE: VPN and Remote Desktop Problems



Hi Steve:
Thank you for posting your questions.

I would like to provide the following suggestions regarding the first issue:

1. Please double check if you have followed the steps in the KB article
below:

283628 How to Enable PPTP Clients to Connect Through an ISA Firewall
http://support.microsoft.com/?id=283628

2. The internal VPN client must be configured as a SecureNAT client. To do
that, you need to configure ISA's internal NIC as the Default Gateway of
the internal clients. The Firewall Client must be removed from the internal
VPN clients.

In addition, there is a known issue for Windows XP or SP1 and it is
resolved by Windows XP SP2.

331816 VPN Client in Windows XP Disconnects After One Minute
http://support.microsoft.com/?id=331816

If you prefer, you could contact Microsoft Product Support Services
directly to obtain the fix. For a complete list of Microsoft Product
Support Services phone numbers and information about support costs, visit
the following Microsoft Web site:

http://support.microsoft.com/default.aspx?scid=fh;EN-US;CNTACTMS

One thing I want to clarify in regards to the second question, you may post
it in another thread. We recommend you post different incidents in
different threads to keep the thread clean. In doing so, it will ensure
your issues are resolved in a timely manner.:)

Nevertheless, I would still like to provide you some information
corresponding to the second issue.

1. When you use a local client to RDP a workstation, does this problem
occur?

2. Does this issue occur on all the workstations you want to access via RDP?

3. Right click My Computer, click Manage. Expand Local Users and groups and
click Group, in the right pane, double click Remote desktop users group and
make sure that the user is added into the group.

4. Check if your account has been granted log on permission locally. To do
so, please follow the steps below:
a. On the Windows XP client on the SBS network, click Start->Run, type
"gpedit.msc" without quotes, and then press Enter. Expand to Locate
Computer configuration->Windows Settings-Security Settings->Local
Policies->User Rights Assignment.
b. Double-click Log on locally and add your domain account.
c. Run the "gpupdate /force" (without quotes) command in the command prompt
window.

I hope this helps. If anything is unclear, please feel free to let me know.
I am glad to be of assistance.
I look forward to hearing from you. Have a nice day, Steve!:)

Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: VPN and Remote Desktop Problems
| thread-index: AcWSQ04AICmC0rwSR06bWKiZZCdNow==
| X-WBNR-Posting-Host: 199.108.227.22
| From: =?Utf-8?B?U3RldmUgSmVuc2Vu?= <Steve
Jensen@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: VPN and Remote Desktop Problems
| Date: Tue, 26 Jul 2005 17:37:02 -0700
| Lines: 12
| Message-ID: <16D36C0D-3B42-4D58-A3BA-30CA7E618C90@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:138990
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| There are 2 problems, the first of which has been an issue in previous
| versions of SBS:
|
| 1. The VPN connection drops after about 30 seconds, regardless of server
or
| client settings. I have seen this on several Windows 2000 and 2003
Server
| RRAS installations.
|
| 2. After establishing a VPN connection to a SBS 2003 network, the user
| cannot log in to a workstation using Remote Desktop. The message is
"Local
| policy on this system does not permit you to logon interactively". The
| message is the same no matter who logs in, including the Administrator.
| Remote Desktop is enabled on the workstations.
|

.



Relevant Pages

  • Re: VPN with SBS Premuim
    ... CEICW (which got Vista working with VPN), but I had not re-run the Remote ... Access Wizard, after running the RAW, Windows XP connected fine. ... you are a credit to Microsoft. ... Extract all files to a folder on ISA server. ...
    (microsoft.public.windows.server.sbs)
  • Re: after installing KB011829 OWA is not working anymore
    ... Windows Vista or IE 7.0 no longer includes support for the ActiveX control ... Microsoft CSS Online Newsgroup Support ... |> Profile WMI Provider to each client computer that is running Windows ...
    (microsoft.public.exchange.connectivity)
  • Re: after installing KB011829 OWA is not working anymore
    ... Enterprise OWA did not work anymore. ... Windows Vista or IE 7.0 no longer includes support for the ActiveX control ... Microsoft CSS Online Newsgroup Support ... |> Profile WMI Provider to each client computer that is running Windows ...
    (microsoft.public.exchange.connectivity)
  • RE: VPN fail to connect
    ... How do you configure the VPN connection? ... Please logon to an internal client computer, ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN Problems
    ... I found the problem is not with the client computers. ... remote network" box in the VPN tcpip advanced settings. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)