RE: Cannot access files using UNC over VPN

Hi Ben,

Thank you for posting in SBS newsgroup.

>From the description, I understand the issue to be: you can not access
files and folders on the server using UNC path from the VPN clients. If I
have misunderstood your concerns, please do not hesitate to let me know.

As I know, the issue may be caused by DNS resolution, we can try to check
the following:

1. SBS configuration:

1) Leave the Default Gateway of the internal NIC blank.
2) Configure both the internal NIC and the external NIC to use the internal
DNS Service as the DNS Server.
3) On the DNS Server, create the DNS Forwarder to forward the external DNS
resolution requests to the ISP's DNS server. See:

323380 How to configure DNS for Internet access in Windows Server 2003
http://support.microsoft.com/?id=323380

4) Strictly followed the instructions in the KB article below to run CEICW:

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

2. Check the default domain controller level policy "Enable computer and
user to be trusted for delegation" to see if it has administrators added as
following:

1) Expand Advanced Management | Group Policy Management | Forest | Domains
| Server name | Domain Controllers.
2) Right click Default Domain Controllers Policy and select Edit.
3) Expand Computer Configuration | Windows Settings | Security Settings |
Local Policies.
4) Click User Rights Assignment and then double click Enable computer and
user accounts to be trusted for delegation in the right pane.
5) Check if Administrators has been added in the policy.

If the issue still occurs, please check the following settings:

1. Make sure that you have selected Enable NetBIOS over TCP/IP and the
Computer Browser service on VPN client computers and SBS as following:

1) Right click My Network Places and select Properties.
2) Right click Local Area Connection (client computer)/Network Connection
(server) and select Properties.
3) Click Internet Protocol (TCP/IP) and high light it. Click Properties.
4) On the General tab, click Advanced. Go to WINS tab.
5) Make sure that you select Enable NetBIOS over TCP/IP.
6) Click OK twice and close all the windows.

For detailed information, please refer to the following KB article:

827603 Remote users cannot see a Windows Small Business Server 2003
computer in
http://support.microsoft.com/?id=827603

318030 You cannot access shared files and folders or browse computers in
the
http://support.microsoft.com/?id=318030

2. Make sure the TCP/IP NetBIOS Helper service and the Server service and
Workstation service are running on SBS, VPN client computers. You may check
them through running Services.msc.
3. Check WINS:

1) Open WINS console in the SBS Administrative Tools.
2) Make sure that the service is started.

4. Check Computer Browser on SBS and VPN client computers:

1) Open Services console in the SBS Administrative Tools.
2) In the right pane, make sure that the "Computer Browser" service is
started and the startup type is "Automatic".
3) Check the same settings on all client computers and make sure that the
"Computer Browser" service is stopped and the startup type is "Disabled".

5. Please disable ICF in your VPN client computers. To do so:

1) Click Start, and then click My Network Places.
2) Under Network Tasks, click View Network Connections.
3) Right-click the connection that you use for the Internet, and then click
Properties.
4) Click the Advanced tab.
5) Click to clear the "Protect my computer and network by limiting or
preventing access to this computer from the Internet" check box.

For detailed information, please refer to the following KB article:

298804 Internet firewalls can prevent browsing and file sharing
http://support.microsoft.com/?id=298804

If it does not works, would you please help me collect the following
information for troubleshooting?

1. Use nslookup utility to check the DNS record:

1) On the VPN client workstation, open a command prompt.
2) Type ''nslookup'' (without the quotation marks) and press Enter.
3) Input the server name and then press Enter. Does it return an internal
IP address?

2. Tried to ping SBS by FQDN and server name from VPN client computers and
what is the result.
3. Get the ipconfig/all result from SBS and problematic VPN client
computers?
4. Does the situation occur on all VPN client computers?
5. What's the error message when you try to access the Server by UNC path?

Hope it helps.

I am appreciated your time and look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Cannot access files using UNC over VPN
|| From: =?Utf-8?B?QmVu?= <Ben@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: Cannot access files using UNC over VPN
| Date: Thu, 12 Jan 2006 13:47:06 -0800
| | Newsgroups: microsoft.public.windows.server.sbs
| |
| Hi,
|
| Thanks to everyone who helped me recently - I got my router working in
the
| end. The problem I have is getting access to files and folders on the
server
| using a UNC path from the client machine when connected via VPN.
|
| I am using the default setup supplied by the Remote access wizard in SBS
| 2003 which ran fine. I can connect via VPN from my client machine fine.
I
| can access everything else no problem RDP, RWW, exchange, etc. I have
| noticed though that I have to type in the port number on the end of the
IP to
| acheive certain tasks - leading me to think that I have a DNS problem but
I
| dont know much about DNS.
|
| I do know that all the forwarders are there for the respective domains
but
| not sure where to look now or what to do. DHCP is off on the router but
on,
| on SBS2003.
|
| Any help would be much appreciated.
|
| Ben
|

.

Relevant Pages
Loading