VPN Server - AD users OK - NT Users not OK

Hi there,
I've got a new VPN Server (Windows 2003 R2) with routing and remote access
set up.

It's all standard. It works fine for Active Directory Users.

It does not work for NT users. It always states Error 691 user and/or
password invalid (it is correct).

Anyone have any ideas?

Thanks.

Pleasse clarify what it means to be an Active Directory Users -vs- and NT
User in your environment.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

"Robert Nafty" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi there,
> I've got a new VPN Server (Windows 2003 R2) with routing and remote access
> set up.
>
> It's all standard. It works fine for Active Directory Users.
>
> It does not work for NT users. It always states Error 691 user and/or
> password invalid (it is correct).
>
> Anyone have any ideas?
>
> Thanks.
>
>
>

Hi,
We have two domains.
Domain A is Active Directory. Most users and servers are here. The VPN
server is here.
We have an old domain (Domain B) which is NT. It has some users on still.
Trusts are in place etc. The domains have ran together for years and don't
have any other problems.

Thanks.


"Phillip Windell" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Pleasse clarify what it means to be an Active Directory Users -vs- and NT
> User in your environment.
>
> --
> Phillip Windell
> www.wandtv.com
>
> The views expressed, are my own and not those of my employer, or
> Microsoft,
> or anyone else associated with me, including my cats.
> -----------------------------------------------------
>
> "Robert Nafty" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Hi there,
>> I've got a new VPN Server (Windows 2003 R2) with routing and remote
>> access
>> set up.
>>
>> It's all standard. It works fine for Active Directory Users.
>>
>> It does not work for NT users. It always states Error 691 user and/or
>> password invalid (it is correct).
>>
>> Anyone have any ideas?
>>
>> Thanks.
>>
>>
>>
>
>

"Robert Nafty" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Hi,
> We have two domains.
> Domain A is Active Directory. Most users and servers are here. The VPN
> server is here.
> We have an old domain (Domain B) which is NT. It has some users on still.
> Trusts are in place etc. The domains have ran together for years and don't
> have any other problems.

I can't prove it,..but I dont' think it will work unless you have one VPN
Server in each domain with each handling the users from that domain. The
"dialup" rights toggle is directly in the properties of the user account
itself (can't be set by Groups) and I don't know that this will be
aknowledged over the Trust.

But I could be wrong here.

What you really need to do is migrate all the users to the AD Domain. The
Trusts will still let the Domains interact share resources with each
other,...but keep all the user accounts in the one AD Domain. Once
migrated, remove the user accounts from the NT Domain to avoid confusion.
The only accounts that should remain are the original built in accounts like
the Administrator.

Research the details before doing it. It will change the way Workstations
on the NT Domain are "logged in" because they will now use the AD Domain on
the third line and the Users profiles might need work. You can break things
unexpectantly if you aren't careful.

The final goal eventually should be to elminate the NT Domain.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------