Problem with VPN and LMcompatibility level

Hi,

I have a problem where a customers site is periodically unavailable via VPN.
We have tracked it down to the LMcompatibility level
(HKLM\system\CCS\control\lsa) which is setting itself to level 5. If is is
set to anything lower then all is ok and people can connect. If we set it to
something lower then it resets itself later.

Anyone have an idea how we can resolve this issue? I understand that it is
all to do with only allowing NTLM v2 and refusing NTLM and LM connections but
not sure what to do to sort it fully.


Thanks,

Chris

That is normal behavior for Windows 2000/2003 remote access servers and as
far as I know there is no workaround. Disabling lm authentication is much
more important than disabling ntlm. --- Steve


"Chris Gradden" <(E-Mail Removed)> wrote in message
news:31D65E7C-D0F8-4E80-AB67-(E-Mail Removed)...
> Hi,
>
> I have a problem where a customers site is periodically unavailable via
> VPN.
> We have tracked it down to the LMcompatibility level
> (HKLM\system\CCS\control\lsa) which is setting itself to level 5. If is
> is
> set to anything lower then all is ok and people can connect. If we set it
> to
> something lower then it resets itself later.
>
> Anyone have an idea how we can resolve this issue? I understand that it
> is
> all to do with only allowing NTLM v2 and refusing NTLM and LM connections
> but
> not sure what to do to sort it fully.
>
>
> Thanks,
>
> Chris
>
>