Re: Mapping a Networked drive letter over VPN

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I am now having a weird after effect from all this. Any administrator can
connect to the server but people who are not administrators cannot. They are
asked for their username and password but their sign on to the mapped server
drive is rejected. This only happens on VPN. the exact message is: incorrect
password or unknown username for \\server\Share and also
an error occurred while reconnecting S: to \\server\share
- Microsoft Windows Network: The network path was not found

Is there still something that I missed?


"Chad A. Gross" wrote:

Perfect! Glad it's working :^)

--

Chad A. Gross
http://www.msmvps.com/blogs/cgross


"Donny" <Donny@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CC6604A7-DD2E-474E-A298-9DAC7052A096@xxxxxxxxxxxxxxxx
Thank you for all your help. This now works the way I expected it to.
Again, Thank you

"Chad A. Gross" wrote:

In your VPN connectoid properties, go to the Networking Tab, select
TCP/IP
v4 and click Properties. Click the Advanced button and go to the DNS
tab,
and add the internal IP of your server as a DNS server. This will force
the
client PC to send all DNS requests to your server across the VPN tunnel
when
the VPN is connected.

--

Chad A. Gross
http://www.msmvps.com/blogs/cgross


"Donny" <Donny@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2F1152C3-BD41-43BB-B1DF-15F337BF9F14@xxxxxxxxxxxxxxxx
Hi again,
I have tried all of the steps that you have suggested. I made the GPO
and
set it to show \\server\share as Drive S which is the same as what is
used
in
the office. I downloaded and installed the GP client side extensions
and I
connected by VPN.
When I try to connect to the Server I get a UAC screen that rejects any
username or password that I try.
I can ping the server but I cant bring it up with a \\servername

What am I missing?

"Chad A. Gross" wrote:

Hi Donny -

The Network Login button is only available IF you have created a VPN
connectoid that is available to all users. If you do not have any VPN
connectoids created, or if the VPN connectoid is only available to the
user
who created it, then you won't see the Network Login button.
Additionally,
I don't know if the Network Login button is available for 3rd party
VPN
solutions - it may be limited to working with just native VPN
connectoids
in
Windows.

--

Chad A. Gross
http://www.msmvps.com/blogs/cgross


"Donny" <Donny@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1CB4797A-5164-4EA3-B9CF-4B6C9C8BFF3A@xxxxxxxxxxxxxxxx
Hi Chad,
I am sorry to keep hounding you. Whe I try to get to the Network
Login
Button that you described for Win Vista I don't see it. Is there an
update
or
an option that I need to install to enable this feature?

"Chad A. Gross" wrote:

Actually, it's pretty simple:

First, you need to create your VPN connectoid on your XP / Vista /
Win7
PC.
When you create the VPN connectoid, make sure you check the option
to
make
the VPN connection available to all users.

Now, when a user is remote and is looking at the login screen, they
can
establish the VPN connection before actually logging in. The
process
is
slightly different between XP & Vista / Win7.

On XP: Hit Ctrl+Alt+Del to enter username & password. Click the
"Options"
button, then click the option to Connect via Dial-Up Networking.
This
will
give you a list of global dial-up connections on the PC (including
VPN
connections). Select the VPN connection you want, enter
credentials
for
that VPN connection and Windows will establish the VPN connection,
THEN
process the user login - allowing the remote user to log in to the
domain
directly.

On Vista / Win7: Hit Ctrl+Alt+Del. Windows will show you the last
user
who
logged in. Click the "Change User" button (even if the listed user
is
the
correct user). As soon as you click the Change User button - you
will
notice a new Network Login button appears in the bottom right
corner
of
the
screen next to the power button. Click the Network Login button -
if
only
one global VPN connection is defined, it will ask you for username
&
password for that VPN connection, otherwise you will get a list of
VPN
connections to pick which one you want to use. Enter the
credentials
for
the VPN and Windows will establish the VPN prior to processing the
user
login, allowing the remote user to log in to the domain directly.

HTH!

--

Chad A. Gross
http://www.msmvps.com/blogs/cgross


"Donny" <Donny@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BAD3A86F-8652-4D3B-92E0-E67A655E4AEC@xxxxxxxxxxxxxxxx
Hi Chad,
You wrote:
"FYI - Group Policy Preferences for mapping drives execute during
login,
so
they will only apply if the roaming notebooks are joined to the
domain
AND
the users establish the VPN connection BEFORE they log in to the
laptop."

How can a remote user connect to the domain over VPN before they
log
in?
If
they are off site do they need a local login, establish VPN then
switch
user
and use their domain account?

"Chad A. Gross" wrote:

FYI - Group Policy Preferences for mapping drives execute during
login,
so
they will only apply if the roaming notebooks are joined to the
domain
AND
the users establish the VPN connection BEFORE they log in to the
laptop.

The Death of IFMEMBER: (drive mapping w/ GPP in SBS 2008)
http://msmvps.com/blogs/cgross/archive/2008/12/16/the-death-of-ifmember.aspx

Installing Group Policy Preferences Client Side Extensions:
(necessary
for
GPP to work on XP & Vista clients)
http://msmvps.com/blogs/cgross/archive/2008/12/16/installing-group-policy-preferences-client-side-extensions.aspx

Drive Mapping via Group Policy Preferences not working for Vista
clients:
(registry fix if your GPP drive maps aren't working on Vista
PCs)
http://msmvps.com/blogs/cgross/archive/2009/03/25/drive-mapping-via-group-policy-preferences-not-working-for-vista-clients.aspx

--

Chad A. Gross
http://www.msmvps.com/blogs/cgross


"Donny" <Donny@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5CB77FEF-F188-4C76-9D04-10AD91269F74@xxxxxxxxxxxxxxxx
Thank you for this post, can you further assist by advising
where
I
would
set
the GP rule. I frequently get mixed up and end up in the wrong
portion
of
Group Policy.
The computers are mobile, as the users that need this are
using
notebooks,
however, the notebooks are dedicated to the individual users.

"Chad A. Gross" wrote:

Are these roaming / individual remote machines, or is there a
remote
office
with several machines at the same remote location?

If you have a remote office, the best solution is most likely
going
to
be
a
persistent router-to-router VPN. The specific setup will
depend
on
the
routers you are using.

If these are individual / roaming machines, you can
definitely
use
the
native SBS VPN functionality. You basically have two
options:

1) If the PCs are joined to the domain, you can create the
VPN
connectoid
on these PCs and instruct users to establish the VPN
connection
before
they
sign in. Group Policy Preferences execute during login, so
if
you
have
these configured to map drives automatically, the drive will
be
mapped
during login as long as the VPN connection is already
established.

2) If PCs are not joined to the domain, you can place a
batch
file
on
the
desktop that would create the drive mapping. This way the
user
could
open
the batch file to map the drive after the VPN is established.
It's
been
a
while since I've done this, but I think you might be able to
configure
the
batch file to both establish the VPN and then create the
drive
mapping -
so
the user(s) would just need to open the batch file

HTH!

--

Chad A. Gross
http://www.msmvps.com/blogs/cgross


"Donny" <Donny@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:904B75AE-B107-40E9-862D-E083DBCB32F0@xxxxxxxxxxxxxxxx
I have been asked to set up a VPN connection for my
customer
who
is
new
to
.

Relevant Pages

  • Re: Mapping a Networked drive letter over VPN
    ... "Chad A. Gross" wrote: ... the VPN is connected. ... establish the VPN connection before actually logging in. ...
    (microsoft.public.windows.server.sbs)
  • Re: Mapping a Networked drive letter over VPN
    ... The Network Login button is only available IF you have created a VPN ... establish the VPN connection before actually logging in. ... "FYI - Group Policy Preferences for mapping drives execute during ...
    (microsoft.public.windows.server.sbs)
  • RE: Integrating Domain and VPN Login
    ... > * Create the VPN connection in XP's Network Connections ... > * There should be a checkbox to authenticate using dial up ... Integrating Domain and VPN Login ...
    (Focus-Microsoft)
  • RE: VPN Connection Problem
    ... since you cannot make a VPN connection over your ... 825763 How to configure Internet access in Windows Small Business Server ... Encapsulation (GRE) protocol traffic. ...
    (microsoft.public.windows.server.sbs)
  • RE: Integrating Domain and VPN Login
    ... Integrating Domain and VPN Login ... authenticating with the domain controller until it has established a VPN ... manually start a VPN connection using the client included with XP Pro. ...
    (Focus-Microsoft)