Disable "Use Default Gateway on Remote Network" on the server?

Is there a way to disable "Use Default Gateway On Remote Network" from
the server? I have a Windows 2000 SP4 box that acts as the VPN server and
I've got a couple of users who keep re-enabling it on their clients and it
puts a lot of stress on our server (all of the internet traffic ends up
moving through our server and they tend to leave their VPN connections
active for quite some time). I've looked around, but haven't been able to
find anything.

Any thoughts?

No. It is a Client-side function, so it is controlled at the client.


--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
-----------------------------------------------------



"Brian Repinski" <(E-Mail Removed)> wrote in message
news:%23Y$Yq$(E-Mail Removed)...
> Is there a way to disable "Use Default Gateway On Remote Network" from
> the server? I have a Windows 2000 SP4 box that acts as the VPN server and
> I've got a couple of users who keep re-enabling it on their clients and it
> puts a lot of stress on our server (all of the internet traffic ends up
> moving through our server and they tend to leave their VPN connections
> active for quite some time). I've looked around, but haven't been able to
> find anything.
>
> Any thoughts?
>
>

Ah, nuts. Thanks for the quick reply.


"Phillip Windell" <@.> wrote in message
news:O%234%(E-Mail Removed)...
> No. It is a Client-side function, so it is controlled at the client.
>
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
> -----------------------------------------------------
> Understanding the ISA 2004 Access Rule Processing
> http://www.isaserver.org/articles/IS...cessRules.html
>
> Microsoft Internet Security & Acceleration Server: Guidance
> http://www.microsoft.com/isaserver/t...dance/2004.asp
> http://www.microsoft.com/isaserver/t...dance/2000.asp
>
> Microsoft Internet Security & Acceleration Server: Partners
> http://www.microsoft.com/isaserver/partners/default.asp
> -----------------------------------------------------
>
>
>
> "Brian Repinski" <(E-Mail Removed)> wrote in message
> news:%23Y$Yq$(E-Mail Removed)...
> > Is there a way to disable "Use Default Gateway On Remote Network"
from
> > the server? I have a Windows 2000 SP4 box that acts as the VPN server
and
> > I've got a couple of users who keep re-enabling it on their clients and
it
> > puts a lot of stress on our server (all of the internet traffic ends up
> > moving through our server and they tend to leave their VPN connections
> > active for quite some time). I've looked around, but haven't been able
to
> > find anything.
> >
> > Any thoughts?
> >
> >
>
>

It is just a matter of teaching users to keep thier fingers out of things
they should not mess with,....but then I guess that can be a difficult thing
to teach. Generally though if they screw it up a couple times and can't get
their work done,...they will learn to leave it alone.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
-----------------------------------------------------


"Brian Repinski" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Ah, nuts. Thanks for the quick reply.
>
>
> "Phillip Windell" <@.> wrote in message
> news:O%234%(E-Mail Removed)...
> > No. It is a Client-side function, so it is controlled at the client.
> >
> >
> > --
> > Phillip Windell [MCP, MVP, CCNA]
> > www.wandtv.com
> > -----------------------------------------------------
> > Understanding the ISA 2004 Access Rule Processing
> > http://www.isaserver.org/articles/IS...cessRules.html
> >
> > Microsoft Internet Security & Acceleration Server: Guidance
> > http://www.microsoft.com/isaserver/t...dance/2004.asp
> > http://www.microsoft.com/isaserver/t...dance/2000.asp
> >
> > Microsoft Internet Security & Acceleration Server: Partners
> > http://www.microsoft.com/isaserver/partners/default.asp
> > -----------------------------------------------------
> >
> >
> >
> > "Brian Repinski" <(E-Mail Removed)> wrote in message
> > news:%23Y$Yq$(E-Mail Removed)...
> > > Is there a way to disable "Use Default Gateway On Remote Network"
> from
> > > the server? I have a Windows 2000 SP4 box that acts as the VPN server
> and
> > > I've got a couple of users who keep re-enabling it on their clients
and
> it
> > > puts a lot of stress on our server (all of the internet traffic ends
up
> > > moving through our server and they tend to leave their VPN connections
> > > active for quite some time). I've looked around, but haven't been
able
> to
> > > find anything.
> > >
> > > Any thoughts?
> > >
> > >
> >
> >
>
>

The problem is the "use default gateway" checkbox is the default option....

Just a thought, is there a way of not supplying a default gateway when the
VPN connects, ie in the DHCP server don't supply a router address. This
will mean they won't be able to browse the internet when they are connected
to VPN unless they uncheck their box. Not sure if this is possible, but if
it does it could be an option!?

Jonny

"Phillip Windell" <@.> wrote in message
news:(E-Mail Removed)...
> It is just a matter of teaching users to keep thier fingers out of things
> they should not mess with,....but then I guess that can be a difficult
> thing
> to teach. Generally though if they screw it up a couple times and can't
> get
> their work done,...they will learn to leave it alone.
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
> -----------------------------------------------------
> Understanding the ISA 2004 Access Rule Processing
> http://www.isaserver.org/articles/IS...cessRules.html
>
> Microsoft Internet Security & Acceleration Server: Guidance
> http://www.microsoft.com/isaserver/t...dance/2004.asp
> http://www.microsoft.com/isaserver/t...dance/2000.asp
>
> Microsoft Internet Security & Acceleration Server: Partners
> http://www.microsoft.com/isaserver/partners/default.asp
> -----------------------------------------------------
>
>
> "Brian Repinski" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Ah, nuts. Thanks for the quick reply.
>>
>>
>> "Phillip Windell" <@.> wrote in message
>> news:O%234%(E-Mail Removed)...
>> > No. It is a Client-side function, so it is controlled at the client.
>> >
>> >
>> > --
>> > Phillip Windell [MCP, MVP, CCNA]
>> > www.wandtv.com
>> > -----------------------------------------------------
>> > Understanding the ISA 2004 Access Rule Processing
>> > http://www.isaserver.org/articles/IS...cessRules.html
>> >
>> > Microsoft Internet Security & Acceleration Server: Guidance
>> > http://www.microsoft.com/isaserver/t...dance/2004.asp
>> > http://www.microsoft.com/isaserver/t...dance/2000.asp
>> >
>> > Microsoft Internet Security & Acceleration Server: Partners
>> > http://www.microsoft.com/isaserver/partners/default.asp
>> > -----------------------------------------------------
>> >
>> >
>> >
>> > "Brian Repinski" <(E-Mail Removed)> wrote in message
>> > news:%23Y$Yq$(E-Mail Removed)...
>> > > Is there a way to disable "Use Default Gateway On Remote Network"
>> from
>> > > the server? I have a Windows 2000 SP4 box that acts as the VPN
>> > > server
>> and
>> > > I've got a couple of users who keep re-enabling it on their clients
> and
>> it
>> > > puts a lot of stress on our server (all of the internet traffic ends
> up
>> > > moving through our server and they tend to leave their VPN
>> > > connections
>> > > active for quite some time). I've looked around, but haven't been
> able
>> to
>> > > find anything.
>> > >
>> > > Any thoughts?
>> > >
>> > >
>> >
>> >
>>
>>
>
>

There are a couple of reasons why that won't work. The main one is that
this setting is not supplied by either the server or by DHCP. It is all done
by the client itself. See KB 254231 "Change in Remote Access Behavior with
Windows 2000".

Jonny wrote:
> The problem is the "use default gateway" checkbox is the default
> option....
> Just a thought, is there a way of not supplying a default gateway
> when the VPN connects, ie in the DHCP server don't supply a router
> address. This will mean they won't be able to browse the internet
> when they are connected to VPN unless they uncheck their box. Not
> sure if this is possible, but if it does it could be an option!?
>
> Jonny
>
> "Phillip Windell" <@.> wrote in message
> news:(E-Mail Removed)...
>> It is just a matter of teaching users to keep thier fingers out of
>> things they should not mess with,....but then I guess that can be a
>> difficult thing
>> to teach. Generally though if they screw it up a couple times and
>> can't get
>> their work done,...they will learn to leave it alone.
>>
>> --
>> Phillip Windell [MCP, MVP, CCNA]
>> www.wandtv.com
>> -----------------------------------------------------
>> Understanding the ISA 2004 Access Rule Processing
>> http://www.isaserver.org/articles/IS...cessRules.html
>>
>> Microsoft Internet Security & Acceleration Server: Guidance
>> http://www.microsoft.com/isaserver/t...dance/2004.asp
>> http://www.microsoft.com/isaserver/t...dance/2000.asp
>>
>> Microsoft Internet Security & Acceleration Server: Partners
>> http://www.microsoft.com/isaserver/partners/default.asp
>> -----------------------------------------------------
>>
>>
>> "Brian Repinski" <(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed)...
>>> Ah, nuts. Thanks for the quick reply.
>>>
>>>
>>> "Phillip Windell" <@.> wrote in message
>>> news:O%234%(E-Mail Removed)...
>>>> No. It is a Client-side function, so it is controlled at the
>>>> client. --
>>>> Phillip Windell [MCP, MVP, CCNA]
>>>> www.wandtv.com
>>>> -----------------------------------------------------
>>>> Understanding the ISA 2004 Access Rule Processing
>>>> http://www.isaserver.org/articles/IS...cessRules.html
>>>>
>>>> Microsoft Internet Security & Acceleration Server: Guidance
>>>> http://www.microsoft.com/isaserver/t...dance/2004.asp
>>>> http://www.microsoft.com/isaserver/t...dance/2000.asp
>>>>
>>>> Microsoft Internet Security & Acceleration Server: Partners
>>>> http://www.microsoft.com/isaserver/partners/default.asp
>>>> -----------------------------------------------------
>>>>
>>>>
>>>>
>>>> "Brian Repinski" <(E-Mail Removed)> wrote in message
>>>> news:%23Y$Yq$(E-Mail Removed)...
>>>>> Is there a way to disable "Use Default Gateway On Remote
>>>>> Network" from the server? I have a Windows 2000 SP4 box that
>>>>> acts as the VPN server
>>> and
>>>>> I've got a couple of users who keep re-enabling it on their
>>>>> clients and it puts a lot of stress on our server (all of the
>>>>> internet traffic ends up moving through our server and they tend
>>>>> to leave their VPN connections
>>>>> active for quite some time). I've looked around, but haven't
>>>>> been able to find anything.
>>>>>
>>>>> Any thoughts?