VPN access from a workgroup help.

Hi,

I am currently running Windows 2003 Server on a domain at
our head office and wish to connect another branch via VPN.
The branch runs on a workgroup. I can succesfully get a VPN
connection over a dial-up account for testing purposes with
a laptop I have here with me. I can access the server when
I have the laptop set up as the same domain that the server
is on, but when I put it on a workgroup to simulate the
branch's network, I can still connect but lose the ability
to view files on the server. When using the workgroup I can
also still access other computers on the domain, just not
the server. I can also ping the server and vice versa. The
branch and laptop are both running XP Pro. I have the user
I am using set up as (among others) a mobile user as per
the help-files instructions. I have also tried with the
server's administrator account but am still denied access
to the server's files. Any help?

Thanks in advance.

-Chris

You cannot test a "Site-to-Site VPN by doing a Remote Access VPN.

The Workgroup needs to use Site-to-Site VPN, but the laptop is doing remote
Access VPN,... those are two different things.

Virtual Private Networking with Windows Server 2003: Deploying Site-to-Site
VPNs
http://www.microsoft.com/technet/pro.../vpndpls2.mspx

Virtual Private Networking with Windows 2000: Deploying Router-to-Router
VPNs
http://www.microsoft.com/windows2000...eplyr2rvpn.asp

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


"Chris" <(E-Mail Removed)> wrote in message
news:2eeb401c46b6f$820c42c0$(E-Mail Removed)...
> Hi,
>
> I am currently running Windows 2003 Server on a domain at
> our head office and wish to connect another branch via VPN.
> The branch runs on a workgroup. I can succesfully get a VPN
> connection over a dial-up account for testing purposes with
> a laptop I have here with me. I can access the server when
> I have the laptop set up as the same domain that the server
> is on, but when I put it on a workgroup to simulate the
> branch's network, I can still connect but lose the ability
> to view files on the server. When using the workgroup I can
> also still access other computers on the domain, just not
> the server. I can also ping the server and vice versa. The
> branch and laptop are both running XP Pro. I have the user
> I am using set up as (among others) a mobile user as per
> the help-files instructions. I have also tried with the
> server's administrator account but am still denied access
> to the server's files. Any help?
>
> Thanks in advance.
>
> -Chris

Sorry, I may have been a bit unclear before. I do not wish
to perform site-to-site vpn. I'm trying to basically have
a remote user (who is on a workgroup, not a domain) connect
via VPN and access computers and their resources on the
domain. He can connect, but he cannot access any server
resources. He can access other computers on the domain and
their resources, just not the server's. Any ideas?

>-----Original Message-----
>You cannot test a "Site-to-Site VPN by doing a Remote
Access VPN.
>
>The Workgroup needs to use Site-to-Site VPN, but the
laptop is doing remote
>Access VPN,... those are two different things.
>
>Virtual Private Networking with Windows Server 2003:
Deploying Site-to-Site
>VPNs
>http://www.microsoft.com/technet/pro.../vpndpls2.mspx
>
>Virtual Private Networking with Windows 2000: Deploying
Router-to-Router
>VPNs
>http://www.microsoft.com/windows2000...eplyr2rvpn.asp
>
>--
>
>Phillip Windell [MCP, MVP, CCNA]
>www.wandtv.com
>
>
>"Chris" <(E-Mail Removed)> wrote in message
>news:2eeb401c46b6f$820c42c0$(E-Mail Removed)...
>> Hi,
>>
>> I am currently running Windows 2003 Server on a domain at
>> our head office and wish to connect another branch via VPN.
>> The branch runs on a workgroup. I can succesfully get a VPN
>> connection over a dial-up account for testing purposes with
>> a laptop I have here with me. I can access the server when
>> I have the laptop set up as the same domain that the server
>> is on, but when I put it on a workgroup to simulate the
>> branch's network, I can still connect but lose the ability
>> to view files on the server. When using the workgroup I can
>> also still access other computers on the domain, just not
>> the server. I can also ping the server and vice versa. The
>> branch and laptop are both running XP Pro. I have the user
>> I am using set up as (among others) a mobile user as per
>> the help-files instructions. I have also tried with the
>> server's administrator account but am still denied access
>> to the server's files. Any help?
>>
>> Thanks in advance.
>>
>> -Chris
>
>
>.
>

"Chris" <(E-Mail Removed)> wrote in message
news:2dbc501c46b72$67d877e0$(E-Mail Removed)...
domain. He can connect, but he cannot access any server
resources. He can access other computers on the domain and
their resources, just not the server's. Any ideas?

No,...too many "billions" of possibilities to simply guess at it. I don't
even know where to begin asking questions.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

>
>No,...too many "billions" of possibilities to simply guess
at it. I don't
>even know where to begin asking questions.
>
>--
>
>Phillip Windell [MCP, MVP, CCNA]
>www.wandtv.com
>
>

Okay, I was just checking if it was possible to do more or
less. I'm assuming that it can be done as your responce
suggested. So I'll keep trudging along 'till I get the
bugger. So long as it can be done.

Thanks for the replys.

Chris

Yea, it can definitely be done. If possible, it works better when the
workgroup name matches the domain name if you are able to do that.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

"Chris" <(E-Mail Removed)> wrote in message
news:2ea0701c46b84$bb4876c0$(E-Mail Removed)...
> >
> >No,...too many "billions" of possibilities to simply guess
> at it. I don't
> >even know where to begin asking questions.
> >
> >--
> >
> >Phillip Windell [MCP, MVP, CCNA]
> >www.wandtv.com
> >
> >
>
> Okay, I was just checking if it was possible to do more or
> less. I'm assuming that it can be done as your responce
> suggested. So I'll keep trudging along 'till I get the
> bugger. So long as it can be done.
>
> Thanks for the replys.
>
> Chris

In news:%(E-Mail Removed),
Phillip Windell <@.> asked for help and I offered my suggestions below:
> Yea, it can definitely be done. If possible, it works better when
> the workgroup name matches the domain name if you are able to do that.
>
>

Hi Phillip,

Keep in mind, if AD is involved and trying to access the resources, the VPN
user needs to insure they are using the AD's DNS server for resolution of
they can't resolve or even access the resource due to authentication. I've
done this a few times before with different workgroup/domain names. DNS is
key here.

Cheers!


--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.
--
=================================