Can't connect from outside.

  • Thread starter Thread starter BigDave
  • Start date Start date
B

BigDave

I am using Windows 2000 with Terminal Server on an Active
Directory domain. I have a user that cannot connect from
outside (VPN via Internet). It must be a permission issue,
because if I add the user to the Administrators group, they
can log in. If I take them out, they can't. Plus, my
account connects fine.
I have the log on locally policy set for this user, but
that doesn't make it work, either. I've also tried copying
an account that does have access, that also didn't work.
The only other thing I can think of is the RAS server I
have running on a Win NT4 system. Since I upgraded to
Active Directory, I can't access the permission list to add
the remote access permission. Is this even close?
Any help would be appreciated,

Big Dave :)
 
Are they having a problem connecting to the terminal
server or authenticating at the logon screen? Can you
post any error messages that they receive?

-M
 
It is a problem connecting at the logon screen (VPN). I get
error 649, Account does not have permission to dial in.
I retested with the Administrators group, and the user
can't connect with those permissions either.
My personal account works fine, as well as a couple other
accounts that aren't part of the Administrators group. I
gave them permission through the NT4 RAS server to dial-in.
But, I can' access that screen anymore (probably because of
Active Directory). Is that permission found in AD?

Thanks again,

Big Dave :)
 
If this is a VPN problem, then I would suggest you post
your problem into a VPN group. It sounds like a profile
problem. Have you tried giving the user a new ntuser.dat
profile?

-M
 
Back
Top