RE: Can't logon to computer in SBS Domain..

Hello Ken,

Thank you for posting.

>From your post, my understanding of this issue is: You cannot connect to
the pc which is on the SBS 2003 domain via Remote Desktop through VPN, but
you can connect to the SBS 2003 Server. If this is not correct, please
feel free to let me know.

First, I suggest we perform a test to isolate the problem, trying to
connect to this pc from another pc on the domain, for example, connect to
this pc from the SBS server via Remote Desktop. If it can be connected, we
can sure that the pc is fine in the RDP connection. If it cannot be
connected from other pcs on the domain, we can sure there is something
wrong on the pc.

If it cannot be connected from other pc on the domain, please refer to the
following steps to verify some settings on the pc:

1. Right-click on My Computer on desktop, and then click Properties.
2. Click on the Remote tab, make sure that the "Allow users to connect
remotely to this computer" check box is checked, and then click OK.
3. Click Start, click Run, type services.msc, and then click OK.
4. Verify the Terminal Services service is started.
5. If the operating system on the pc is Windows XP SP2, please verify SBS
Group Policy settings for Windows Firewall, make sure that the Remote
Desktop (port 3389) is in the Exceptions list. Or you may turn the
firewall off for a test.

For more information about Windows Firewall GPO settings, please refer to
the following link:
Windows XP SP2 Deployment Whitepaper
http://go.microsoft.com/fwlink/?linkid=33331

6. If there is any other firewall installed on the pc, please also disable
them for a test. We may perform a Clean Boot to disable any third-party
services and applications for a test. To perform a Clean Boot, please
refer to the following steps:
a. Click Start, click Run, type "msconfig" (without the quotation marks) in
the Open box, and then click OK.
b. In the Startup tab, click the "Disable All" button.
c. In the Services tab, check the "Hide All Microsoft Services" checkbox,
and then click the "Disable All" button.
d. Click OK and restart the computer.

Please test this issue on the Clean Boot environment, if the issue
disappears in the Clean Boot environment, we can use a 50/50 approach to
quickly narrow down which entry is causing the issue.

If it can be connected from other pc on the domain, but still cannot be
connected through VPN, please refer to the following steps to perform some
tests:

1. On the remote pc (outside the firewall), open a MS-DOS window.
2. Type the following command:
telnet IPaddress 3389
(Where the IPaddress is the IP address of the pc in the domain)

- If there is a blank window appears (no any error message and only a
blinking cursor), it indicates that the port 3389 on the domain pc is
opened and it can be connected from the remote pc.
- If there is an error message appears, it indicates that the connection to
the domain pc is blocked or the port 3389 is blocked between the domain pc
and the remote pc. Therefore, please verify the network or the firewall
settings.

If the issue persists, or we cannot find any clue about why the connection
is blocked, please help me to collect the following information, so that I
can perform further research on it:

1. Please let me know the results of the above tests.
2. What are the operating systems of the domain pc and the remote pc?
3. Whether there is any error message when you attempt to connect to the
domain pc via Remote Desktop? If there is, please let me know the exact
error message. A screen shot will be helpful for me, and you may send the
screen shot to me at v-stwang@xxxxxxxxxxxxxx

Hope the above information helps. If there is anything unclear or you have
any concerns, please feel free to let me know. Thanks for your time and I
look forward to hearing from you soon.

Have a nice day!

Steven Wang (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding
other Microsoft products, you'd better post in the corresponding newsgroups
so that
they can be resolved in an efficient and timely manner. You can locate the
newsgroup
here: http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates
in your thread. When responding to posts via your newsreader, please "Reply
to Group"
so that others may learn and benefit from your issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other
information for your reference, we recommend you post different incidents
in different
threads to keep the thread clean. In doing so, it will ensure your issues
are resolved
in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check
http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>From: Frank Perdue <chicken1@xxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Can't logon to computer in SBS Domain..
>Date: Mon, 05 Sep 2005 14:48:56 -0400
>Organization: PANIX Public Access Internet and UNIX, NYC
>Lines: 14
>Message-ID: <dfi3uo$m7v$1@xxxxxxxxxxxxxxxxx>
>NNTP-Posting-Host: cpe-66-108-228-155.nyc.res.rr.com
>Mime-Version: 1.0
>Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>Content-Transfer-Encoding: 7bit
>X-Trace: reader1.panix.com 1125946136 22783 66.108.228.155 (5 Sep 2005
18:48:56 GMT)
>X-Complaints-To: abuse@xxxxxxxxx
>NNTP-Posting-Date: Mon, 5 Sep 2005 18:48:56 +0000 (UTC)
>User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716)
>X-Accept-Language: en-us, en
>Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!panix!not-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:150918
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Newbie installs SBS server and now adds a networked pc to the domain.
>The networked pc is given a static IP address on the inside of the
>firewall, DNS address is the Server, and gateway is the firewall address.
>
>Now, have a successful VPN connection to the firewall which will allow
>for rdp access to the SBS Server, but can't get access to the PC on the
>domain. Want users to be able to connect to the PC- using the
>authenticated VPN to the firewall.
>
>Is this a GPO policy issue? Help!
>
>TIA,
>
>Ken
>

.

Loading