Certain users having VPN issue

I have a Server 2k RRAS on my 2k3 domain. Most of the users can use the VPN
just fine, and those that can, actually rave about it. Some users are having
problems, though. They connect just fine using a CMAK profile, and they show
up in the MMC, but they are unable to use any resources on the domain.

Symptoms of the afflicted:

Login works, and they show up in MMC.
They can ping by name or address, any server in the domain.
Outlook times out trying to connect to server.
Mapping network drives asks them for credentials, but they get refused.
Can't use a SQL client to get to the database.
A couple of afflicted users used to have no problem, but now they get ALL
the above symptoms.
I'm growing bald from pulling my hair out. (That's not the real reason

Network:
PDC is 2003 SBS
RRAS is 2k RRAS
DHCP is another 2k3 DC
IP address on domain is 172.16.16.x 255^3
At least one of the afflicted is on a 192.168.x.x (probably all are).
Afflicted users can ping servers by [short] name or by address.
All servers are up to date on patches.
All workstations are up to date on patches. (afflicted or not)
All machines using McAfee 8.5i, and are up to date. (afflicted or not)

I have convinced one user to replace his D-Link router at home with a
Linksys that is known to work well. Haven't heard back from him yet. Thing
is, this user is fairly tech savvy, and his VPN used to work just fine, so...

Any ideas?
Please?

"LoneWolf" <(E-Mail Removed)> wrote in message
news:39738BE1-A3CA-46E1-9500-(E-Mail Removed)...
> Login works, and they show up in MMC.
> They can ping by name or address, any server in the domain.
> Outlook times out trying to connect to server.
> Mapping network drives asks them for credentials, but they get refused.
> Can't use a SQL client to get to the database.
> A couple of afflicted users used to have no problem, but now they get ALL
> the above symptoms.
> I'm growing bald from pulling my hair out. (That's not the real reason

Two things I would do.

1. Run a WINS Server. Make sure all machines are using it. Make sure the VPN
Users get the WINS Specs from DHCP when they connect (requires DHCP Agent to
be configured in RRAS). Both Outlook/Exchange and SQL connections can
sometimes get maniacle without WINS and these two seem to be the center of
your issues.

2. Make sure the user, when at home, login to the machine by "checking" the
box that says Log on Using Dialup Connection". This is found at the
credentials prompt right after hitting Crtl-Alt-Del. They will be asked to
choose the correct VPN connection as the machine is logging in,..if there is
only one, then it is a no-brainer to pick the right one.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------