70-216 - ME VPN client ...why this?

Author

ME VPN client ...why this?

Kidvegas19

2002-11-14, 7:59 pm

Scenerio:

RAS at home hooked to cable modem. (Heretofore forever known as the server)

Across town, a computer that duals ME and Server on dial up. (the client)

With the client I dial up to ISP and then establish VPN connection with the server using the administrator account. When I do this on the client's 2K Server install, no problems. Can access the different drives on the server. (start, run, \\169.254.175.107\d$ and bink, there it is).
When I do the same thing while the client is using the ME install, I am prompted with "You must supply a password to make this connection" I have not set any passwords for this and since this is my lab setup I have consistently used one password for everything that uses a password like my users. When I supply this password (or a space, or a blank)I get returned with an error "The password wasn't recognized. Make sure you typed the password correctly. If problem persists, you might not have access to the specified share, contact your system administrator." Hmmm...I am the sys admin so I am contacting you guys for some help! LOL!

When using ME as the client I have no problems establishing the VPN and terminal services works as advertised. I just can't access the drives. Any ideas?

cm2gj

2002-11-16, 3:00 pm

quote:
Originally posted by Kidvegas19
Scenerio:

RAS at home hooked to cable modem. (Heretofore forever known as the server)

Across town, a computer that duals ME and Server on dial up. (the client)

With the client I dial up to ISP and then establish VPN connection with the server using the administrator account. When I do this on the client's 2K Server install, no problems. Can access the different drives on the server. (start, run, \\169.254.175.107\d$ and bink, there it is).
When I do the same thing while the client is using the ME install, I am prompted with "You must supply a password to make this connection" I have not set any passwords for this and since this is my lab setup I have consistently used one password for everything that uses a password like my users. When I supply this password (or a space, or a blank)I get returned with an error "The password wasn't recognized. Make sure you typed the password correctly. If problem persists, you might not have access to the specified share, contact your system administrator." Hmmm...I am the sys admin so I am contacting you guys for some help! LOL!

When using ME as the client I have no problems establishing the VPN and terminal services works as advertised. I just can't access the drives. Any ideas?

is logic.....
win9x clients (me is win9x kernel, not NT) use IPC$ to access 2k and nt volumes.

you need to add the account of the ME computer on the server and provide a password.

after vpn connection, when you try to access the volumes, you provide the password only and you receive access.

is the same with 2k and 98, xp and 98, etc...... everytime the 98 computer try to access 2k or xp, a password is asked on a IPC windows, and you must add the 98 account to 2k.......

add the me account in the 2k server.

Kidvegas19

2002-11-16, 9:16 pm

Thanks cm2gj,

I guess I still don't get it.

I added the ME machine as a new computer in active directory users and computers snap in. It did not provide the opportunity to set a password. I can right click on the computer and choose reset, which in the description resets the password, but again, it just completes the operation and does not provide a chance to set the password.

After I added the computer, I get the same results. Even when trying to access shares that aren't administrative, but ones I set up. Still asks me for a password.

What password is it looking for? I would assume it is the password of the user account that established the VPN. But that is not it.

I am really stumped now.

Slinky

2002-11-17, 12:27 pm

Computers running Windows 98 and Windows 95 do not have the advanced security features of those running Windows 2000 and Windows NT, and cannot be assigned computer accounts in Windows 2000 domains. However, you can log on to a network and use Windows 98 and Windows 95 computers in Active Directory domains.

I'm sure this applies to ME also.

cm2gj

2002-11-17, 9:46 pm

i deal with your problem EVERY day and i´m sure is the same problem........

if the user on the ME computer is called OEMuser and you want to access resources on the win2k domain, you need to add the account to the domain and nothing more..... if the 2k computer is a member server or another pro computer, you only need to add the OEMuser to the local users group and you receive access.....

Kidvegas19

2002-11-18, 2:24 am

Thanks Slinky - makes sense.

cm2gj - here is how I have it set up, perhaps you can let me know where the hitch is.

The server has a user (I called clientadmin)who is a member of domain admins and domain users. The server now has a computer account of the ME machine (called scoobydo, long story LOL!) which is a member of the domain computers. I log on to the scoobydo computer with a username I set up a long time ago which is not clientadmin or any user on the server. I then dial up to ISP, then VPN to the server and the connection is authenticated with the username and password of clientadmin.

Should my server have a user account that is the same as what I log on to the ME machine with? In other words, if I created a profile on the ME machine called clientadmin and logged on with that before VPN process, it should work like I expect?

I would like to get this solved in my head. Like you say, you work with it every day. I imagine in real life that a bunch of the VPN clients are 98SE or ME type machines.

Thanks again for your help.

kv

cm2gj

2002-11-18, 11:02 am

quote:
Originally posted by Kidvegas19
T

Should my server have a user account that is the same as what I log on to the ME machine with? In other words, if I created a profile on the ME machine called clientadmin and logged on with that before VPN process, it should work like I expect?

kv

your server need the SAME account your are using when you connect to your ISP.

For example, if you log in into the ME using account1, the account1 must exist on the server. if don`t exist, you can`t access the shared resources on the server.

this apply when you have a enviroment with 2k and 9x clients. if you have a domain maybe this change because a domain have more restrictions.

what is the problem with the vpn?. i have a win2k rras server with vpn configured and i can access the vpn server with almost any OS providing the account of AD.

Kidvegas19

2002-11-19, 12:05 am

OK Alex, got it to work just like you said it would in your very first post, LOL!

I have learned my lesson. I thought that the VPN client was authenticated as the username/password of the the user used to connect the VPN. Therefore, that user would be able to access resources. Now I realize that is not the case. The logged in user of the client needs a matching user on the server as well, regardless of which user id is used to make the VPN connection.

Thanks again to you and Slink for your input.

KV

cm2gj

2002-11-19, 5:04 am

quote:
Originally posted by Kidvegas19
OK Alex, got it to work just like you said it would in your very first post, LOL!

I have learned my lesson. I thought that the VPN client was authenticated as the username/password of the the user used to connect the VPN. Therefore, that user would be able to access resources. Now I realize that is not the case. The logged in user of the client needs a matching user on the server as well, regardless of which user id is used to make the VPN connection.

Thanks again to you and Slink for your input.

KV

nice!!!!!!

Sponsored Links