Remote access - Help please

Hi,
Please help me.

I am very new to networking. I apologize if this is not the right group to
post, but I do not know where to look for an answer and networking sounded
kind of right. Any help/lead/clue you can give me will be greatly appreciated.

I have a small office network: Windows server 2003, SP1; I think there is no
ISA (I did not see anything called ISA on the Administrative Tools menu or at
the Add/Remove Programs applet); 8 client PCs, and 8 user accounts. 3 of
these users have VPN access.

I implemented VPN with a Linksys RV-042. I use Windows XP VPN client to
connect to the PPTP VPN function of the Linsys which supports up to 5
concurrent VPN sessions.

My problem is that 1 of the 3 VPN users does not have access to the network
resources when she logs in to the domain. However, when she logs to the local
machine account, she can access all the resources on the LAN. The other 2
users are working ok.

Any idea what could be causing the problem?

Thanks in advance,
Pablo.

Is it possible both VPN server and client using the same IP range? This search result may help,

Both VPN sites are in the same IP range A: You will not be able to do this with a VPN connection if both subnets are using the same IP subnet. What you are setting up is a LAN to LAN (also called ...
www.chicagotech.net/Q&A/vpn20.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Pablo" <(E-Mail Removed)> wrote in message news:0D9F810C-7BF7-4D2F-A9C2-(E-Mail Removed)...
Hi,
Please help me.

I am very new to networking. I apologize if this is not the right group to
post, but I do not know where to look for an answer and networking sounded
kind of right. Any help/lead/clue you can give me will be greatly appreciated.

I have a small office network: Windows server 2003, SP1; I think there is no
ISA (I did not see anything called ISA on the Administrative Tools menu or at
the Add/Remove Programs applet); 8 client PCs, and 8 user accounts. 3 of
these users have VPN access.

I implemented VPN with a Linksys RV-042. I use Windows XP VPN client to
connect to the PPTP VPN function of the Linsys which supports up to 5
concurrent VPN sessions.

My problem is that 1 of the 3 VPN users does not have access to the network
resources when she logs in to the domain. However, when she logs to the local
machine account, she can access all the resources on the LAN. The other 2
users are working ok.

Any idea what could be causing the problem?

Thanks in advance,
Pablo.

Hi Robert,
Thanks for your reply.

Both places, i.e. LAN and remote location, have the same IP range
(192.168.1.0/24). However, I do not think this is the issue because when the
user initiates a VPN session from the local computer account everything works
fine. The only "inconvenience" is that she has to send credentials when
trying to access resources on the LAN. For example, when she types
\\server\shareddocs on "My Computer" a pop up window will ask for her
username and password. All she has to do is type in her AD username and all
is fine.

But, when she initiates the session from her AD account (at home she does
the CTRL-ALT-DEL sequence and types her AD user to get to her desktop and
from there she connects to the VPN) none of the resources are available. The
only difference between these two scenarios is the account she is using.

Nevertheless, just to make sure the IP range was not the culprit, I changed
her home addressing to 192.168.2.0/24 (the office remained with
192.168.1.0/24). As you might be guessing, the problem continues: no access
to server resources when using her AD account to connect from home.

Is it possible that her account is somehow blocked?

Regards,
Pablo.

Assuming she can ping the remote pc, she may need to cache the credentials by using net command. I have another case in this link,

Can access remote computer via VPN occasionally The username that we use to test can access the remote computer all time. 3. When we can't access the remote computer via VPN, we use net view command to ...
www.chicagotech.net/casestudy/vpnaccess1.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Pablo" <(E-Mail Removed)> wrote in message news:0E645C30-FD73-4B60-BDF1-(E-Mail Removed)...
Hi Robert,
Thanks for your reply.

Both places, i.e. LAN and remote location, have the same IP range
(192.168.1.0/24). However, I do not think this is the issue because when the
user initiates a VPN session from the local computer account everything works
fine. The only "inconvenience" is that she has to send credentials when
trying to access resources on the LAN. For example, when she types
\\server\shareddocs on "My Computer" a pop up window will ask for her
username and password. All she has to do is type in her AD username and all
is fine.

But, when she initiates the session from her AD account (at home she does
the CTRL-ALT-DEL sequence and types her AD user to get to her desktop and
from there she connects to the VPN) none of the resources are available. The
only difference between these two scenarios is the account she is using.

Nevertheless, just to make sure the IP range was not the culprit, I changed
her home addressing to 192.168.2.0/24 (the office remained with
192.168.1.0/24). As you might be guessing, the problem continues: no access
to server resources when using her AD account to connect from home.

Is it possible that her account is somehow blocked?

Regards,
Pablo.

Thanks Robert.

I still can not test your sugestion (the user won't take the computer home
till Friday), but I'll let you know how it goes.

Do you have any idea why I have this issue only with this particular user
and not with any of the other VPN users?

Pablo.

"Robert L [MVP - Networking]" wrote:

> Assuming she can ping the remote pc, she may need to cache the credentials by using net command. I have another case in this link,
>
> Can access remote computer via VPN occasionally The username that we use to test can access the remote computer all time. 3. When we can't access the remote computer via VPN, we use net view command to ...
> www.chicagotech.net/casestudy/vpnaccess1.htm
>
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
> "Pablo" <(E-Mail Removed)> wrote in message news:0E645C30-FD73-4B60-BDF1-(E-Mail Removed)...
> Hi Robert,
> Thanks for your reply.
>
> Both places, i.e. LAN and remote location, have the same IP range
> (192.168.1.0/24). However, I do not think this is the issue because when the
> user initiates a VPN session from the local computer account everything works
> fine. The only "inconvenience" is that she has to send credentials when
> trying to access resources on the LAN. For example, when she types
> \\server\shareddocs on "My Computer" a pop up window will ask for her
> username and password. All she has to do is type in her AD username and all
> is fine.
>
> But, when she initiates the session from her AD account (at home she does
> the CTRL-ALT-DEL sequence and types her AD user to get to her desktop and
> from there she connects to the VPN) none of the resources are available. The
> only difference between these two scenarios is the account she is using.
>
> Nevertheless, just to make sure the IP range was not the culprit, I changed
> her home addressing to 192.168.2.0/24 (the office remained with
> 192.168.1.0/24). As you might be guessing, the problem continues: no access
> to server resources when using her AD account to connect from home.
>
> Is it possible that her account is somehow blocked?
>
> Regards,
> Pablo

Robert,
I run net use as you suggested. Now I have access to some server resources.
However, I can not access Exchange.

What is most puzzling to me is that if I connect from the same computer but
not using the AD account, I have access to all the resources.

I guess I could have the user connect with one account from home (the local
computer account) and with a different account at work. But this is very
confusing to her and I feel it would not be a clean, nice, and good
engineering solution. She is the only one having this issue. There must be
some parameter to change. The problem (or one of the problems) is that I
don't know what parameter it could be.

Any other ideas?

Thanks,
Pablo.