VPN kerberos? NAS issue

Hi,
I have a Windows 2003 native Active Directory. I have a 3rd Party VPN
solution that uses SecurID tokens to authenticate users before allowing them
access (completely separate to AD, and not integrated).

Users log on to their laptops at home (using cached credentials, as no DC's
available), then establish a VPN connection to the LAN. They are able to
access all resources (Exchange email, File servers etc), with the exception
of unix powered NAS boxes. When attempting to map a drive to these NAS
boxes, users receive an access denied message. When on the LAN, users can
access the NAS boxes without this error.

Presumably there is some authentication issue related to the users working
from cached cred accessing unix resources.(but this is OK - or somehow gets
revalidated for access to Windows based resources).

Any ideas how to resolve the access denied?

With the Windows VPN client, you can solve this by checking the box for
'Logon using dial-up connection' at the logon screen. Don't know whether it
would work with a 3rd party VPN.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

"fred" <(E-Mail Removed)> wrote in message
news:15B55B0C-B68B-45EB-8A86-(E-Mail Removed)...
> Hi,
> I have a Windows 2003 native Active Directory. I have a 3rd Party VPN
> solution that uses SecurID tokens to authenticate users before allowing
them
> access (completely separate to AD, and not integrated).
>
> Users log on to their laptops at home (using cached credentials, as no
DC's
> available), then establish a VPN connection to the LAN. They are able to
> access all resources (Exchange email, File servers etc), with the
exception
> of unix powered NAS boxes. When attempting to map a drive to these NAS
> boxes, users receive an access denied message. When on the LAN, users
can
> access the NAS boxes without this error.
>
> Presumably there is some authentication issue related to the users working
> from cached cred accessing unix resources.(but this is OK - or somehow
gets
> revalidated for access to Windows based resources).
>
> Any ideas how to resolve the access denied?

Thanks Doug,

Unfortunately that is not an option in this scenario - we have to use the
3rd party client, which does not have the "Dial-up" option.