RE: SBS Connection Manager Failure

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi Paul,

Thanks for your update.

To narrow down the problem, would you please help me collect the following
information?

1. Does the situation occur only on one remote client?
2. If you try to create VPN to SBS using its public IP, does the situation
occur?
3. If you create VPN to SBS from another client and another location, does
the situation occur?
4. Please try to connect a laptop to the external NIC of SBS and then
create VPN to see how thing goes.
5. Do you have ISA installed on your SBS?

Thanks for your time and I look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: SBS Connection Manager Failure
| thread-index: Aca0sXBvt9hfPc1wRFeLBLkxEy/jHQ==
| X-WBNR-Posting-Host: 86.133.94.156
| From: =?Utf-8?B?UGF1bF9ISVQ=?= <PaulHIT@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <12CE42FB-B66A-4890-9368-B035D72E1953@xxxxxxxxxxxxx>
<el13aYtrGHA.4664@xxxxxxxxxxxxxxxxxxxxx>
<CEE0FFA9-6922-4653-BEFD-A868ADDF04A6@xxxxxxxxxxxxx>
<IZ5#eUJsGHA.2004@xxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: SBS Connection Manager Failure
| Date: Mon, 31 Jul 2006 07:56:01 -0700
| Lines: 285
| Message-ID: <1AD547CA-5F76-4C17-8D31-0CEF47163539@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGXA01.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:285735
| NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi,
|
| Sorry for the delay but I have been away on business.
|
| We have tried changing the policy as you describe and we get the same
| results in that the credentials fail validation.
|
| Also we get the same with a manually created vpn connection.
|
| Where else may we look for the answer?
|
| Many thanks for your help.
|
| Regards
|
| Paul.
|
|
|
| ""Crina Li"" wrote:
|
| > Hi Paul,
| >
| > Thanks for your update.
| >
| > Please check the default domain policy and change the following under:
| >
| > Computer configuration\Windows Settings\Security Settings\Local
| > Policies\Security Settings:
| >
| > 1. Microsoft network server\Digitally sign communications (always)
enabled
| > - changed to disabled.
| > 2. Domain Member: Digitally encrypt or sign secure channel data
(always) -
| > set to disabled.
| > 3. Network Security: Lan Manager Authentication level - Changed from
"Send
| > NTLM response only" to "Send LM & NTLM responses".
| >
| > Also please help me confirm if you can create VPN to SBS manually.
| >
| > Thanks for your time and I look forward to hearing from you.
| >
| > Best regards,
| >
| > Crina Li (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| >
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| > --------------------
| > | Thread-Topic: SBS Connection Manager Failure
| > | thread-index: Acawdn9/IX0kcFd7REO2w9+3OOKKNg==
| > | X-WBNR-Posting-Host: 81.152.92.224
| > | From: =?Utf-8?B?UGF1bF9ISVQ=?= <PaulHIT@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | References: <12CE42FB-B66A-4890-9368-B035D72E1953@xxxxxxxxxxxxx>
| > <el13aYtrGHA.4664@xxxxxxxxxxxxxxxxxxxxx>
| > | Subject: RE: SBS Connection Manager Failure
| > | Date: Tue, 25 Jul 2006 22:44:01 -0700
| > | Lines: 150
| > | Message-ID: <CEE0FFA9-6922-4653-BEFD-A868ADDF04A6@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | Path: TK2MSFTNGXA01.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:284285
| > | NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | Hi Crina Li,
| > |
| > | I have ran both wizards as you suggest and downloaded the CM again.
| > | I get the same results with the admin account.
| > |
| > | The actual problem that occurs is as follows:
| > |
| > | In the CM status box I get "connecting" followed by "establishing"
and
| > then
| > | "verfying" the next thing is that a new dialogue box pops up saying
| > |
| > | "Your credentials have failed remote network authentication" and asks
me
| > to
| > | enter the details again. However I know that I am entering the
correct
| > | credentials and this also happens as above with other users.
| > |
| > | Any other thoughts - as the CM has been working fine until recently?
| > |
| > | Many Thanks
| > |
| > | Paul
| > |
| > | ""Crina Li"" wrote:
| > |
| > | > Hi Paul,
| > | >
| > | > Thank you for posting in SBS newsgroup.
| > | >
| > | > From your description, I understand the issue to be: You can not
create
| > VPN
| > | > to SBS using Connection Manager. If I have misunderstood your
concerns,
| > | > please do not hesitate to let me know.
| > | >
| > | > Please try to follow the steps below to reconfigure VPN access on
SBS:
| > | >
| > | > 1. Run CEICW, follow the wizard and select Enable firewall and then
| > make
| > | > sure Virtual Private Networking (VPN) is selected in the Services
| > | > Configuration page. And make sure you have typed the public FQDN of
the
| > SBS
| > | > server on the Web Server Certificate page.
| > | > 2. Run Remote Access Wizard in Server Management\Internet and
| > | > E-mail\Configure Remote Access, and select VPN access in the Remote
| > Access
| > | > Method page. After finishing this wizard, RRAS is configured to
allow
| > | > inbound VPN access, and it can assign IP addresses to the VPN
clients
| > by
| > | > using DHCP.
| > | >
| > | > Note: When we run the remote access wizard to set up the VPN
service,
| > we
| > | > need to input the public IP address or the public FQDN of the SBS
| > server.
| > | > We need to make sure that the address can be accessed from the
internet.
| > | >
| > | > 3. On the VPN client, go to https://publicFQDN/remote, clear I'm
using
| > a
| > | > public or shared computer, log in and download Connection Manager.
| > | > 4. Install Connection Manager on the VPN client.
| > | > 5. Is there a hardware router installed in front of the SBS server?
If
| > so,
| > | > ensure that the port forwarding for TCP 1723 and GRE port (protocol
| > number
| > | > 47) are opened. PPTP VPN is negotiating a connection on TCP port
1723
| > and
| > | > send data to and from the PPTP server using the GRE protocol (IP
| > Protocol
| > | > 47, 0x2F if you are looking in Network Monitor). You should open
port
| > 1723
| > | > on the router and also make sure IP Protocol 47 is allowed.
| > | >
| > | > If the issue still occurs, would you please help me collect the
| > following
| > | > information?
| > | >
| > | > 1. Is everything OK if you manually create a VPN connection to the
SBS
| > | > server? To do so, see:
| > | >
| > | > 305550How to configure a VPN connection to your corporate network
in
| > | > Windows XP Professional
| > | > http://support.microsoft.com/default.aspx?scid=kb;EN-US;305550
| > | >
| > | > 314076 How to configure a connection to a virtual private network
| > (VPN) in
| > | > http://support.microsoft.com/?id=314076
| > | >
| > | > 2. What is the detailed error message?
| > | > 3. Does the situation occur on Administrator account?
| > | > 4. Get the IPCONFIG /ALL results when Creating VPN on remote client
and
| > SBS.
| > | >
| > | > I appreciate your time and look forward to hearing from you.
| > | >
| > | > Best regards,
| > | >
| > | > Crina Li (MSFT)
| > | >
| > | > Microsoft CSS Online Newsgroup Support
| > | >
| > | > Get Secure! - www.microsoft.com/security
| > | >
| > | > =====================================================
| > | > This newsgroup only focuses on SBS technical issues. If you have
issues
| > | > regarding other Microsoft products, you'd better post in the
| > corresponding
| > | > newsgroups so that they can be resolved in an efficient and timely
| > manner.
| > | > You can locate the newsgroup here:
| > | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > | >
| > | > When opening a new thread via the web interface, we recommend you
check
| > the
| > | > "Notify me of replies" box to receive e-mail notifications when
there
| > are
| > | > any updates in your thread. When responding to posts via your
| > newsreader,
| > | > please "Reply to Group" so that others may learn and benefit from
your
| > | > issue.
| > | >
| > | > Microsoft engineers can only focus on one issue per thread.
Although we
| > | > provide other information for your reference, we recommend you post
| > | > different incidents in different threads to keep the thread clean.
In
| > doing
| > | > so, it will ensure your issues are resolved in a timely manner.
| > | >
| > | > For urgent issues, you may want to contact Microsoft CSS directly.
| > Please
| > | > check http://support.microsoft.com for regional support phone
numbers.
| > | >
| > | > Any input or comments in this thread are highly appreciated.
| > | >
| > | > =====================================================
| > | >
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > | > --------------------
| > | > | Thread-Topic: SBS Connection Manager Failure
| > | > | thread-index: AcauMcVcsA1Q7RJBSnaMHVoOWo1UZQ==
| > | > | X-WBNR-Posting-Host: 81.156.98.170
| > | > | From: =?Utf-8?B?UGF1bF9ISVQ=?= <PaulHIT@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | > | Subject: SBS Connection Manager Failure
| > | > | Date: Sun, 23 Jul 2006 01:27:01 -0700
| > | > | Lines: 13
| > | > | Message-ID: <12CE42FB-B66A-4890-9368-B035D72E1953@xxxxxxxxxxxxx>
| > | > | MIME-Version: 1.0
| > | > | Content-Type: text/plain;
| > | > | charset="Utf-8"
| > | > | Content-Transfer-Encoding: 7bit
| > | > | X-Newsreader: Microsoft CDO for Windows 2000
| > | > | Content-Class: urn:content-classes:message
| > | > | Importance: normal
| > | > | Priority: normal
| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| > | > | Newsgroups: microsoft.public.windows.server.sbs
| > | > | Path: TK2MSFTNGXA01.phx.gbl
| > | > | Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.sbs:283409
| > | > | NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| > | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > | > |
| > | > | We have been using SBS for several months and Connection Manager
has
| > been
| > | > | working fine. However when we now try to connect using CM it
fails by
| > | > putting
| > | > | up a dialoge box which states I have used the wrong credentials.
I am
| > not
| > | > | using the wrong credentials and I can still get remote access via
RWW
| > etc
| > | > | with the same credentials. (This happens to several users when we
| > attempt
| > | > | connection via CM)
| > | > |
| > | > | We have not (knowingley) changed anything in this area and I have
ran
| > the
| > | > | remote connection wizard to no avail.
| > | > |
| > | > | Can anyone throw any light on this one please?
| > | > |
| > | > | Paul.
| > | > |
| > | >
| > | >
| > |
| >
| >
|

.

Relevant Pages

  • Re: Site to Site IPSec VPN unstable (long post)
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... | the vpn, you will experience delays and soon be bumped off. ... The remote ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN disconnection
    ... server's external NIC and try to create to create VPN ... down if the problem is caused by the server itself. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: vpn connection to exchange server
    ... VPN overview ... Microsoft CSS Online Newsgroup Support ... to resolve the issue ...
    (microsoft.public.windows.server.sbs)
  • Re: vpn connection to exchange server
    ... VPN overview ... Microsoft CSS Online Newsgroup Support ... to resolve the issue ...
    (microsoft.public.windows.server.sbs)
  • RE: Cisco Pix VPN Windows 2003 domain integration
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Cisco Pix VPN Windows 2003 domain integration ...
    (microsoft.public.windows.server.sbs)