Windows 2008/Vista cannot access resources on Server after PPTP logon

Replaced my old firewall and now I can sucessfully connect to the
Windows 2008 Server from a Vista workstation using PPTP. The logon is
successful and I get a second Network "FBC Network" in the manage
networks dialog.. I can see the connection in Routing and Remote
Access and the domain and user look correct. The user has all the
permissions and in fact is an administrator.

I am not sure how to activate the second network. It appears to me it
whould be very simple but I am not able to connect so I can see (pull)
the resources on the server.

Hopt this makes sense and someone can give me some to get past this
problem.

Thanks

Lee

Do a simple test. can you ping a remote computer by IP?

--
Bob Lin, Microsoft-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com


<(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Replaced my old firewall and now I can sucessfully connect to the
> Windows 2008 Server from a Vista workstation using PPTP. The logon is
> successful and I get a second Network "FBC Network" in the manage
> networks dialog.. I can see the connection in Routing and Remote
> Access and the domain and user look correct. The user has all the
> permissions and in fact is an administrator.
>
> I am not sure how to activate the second network. It appears to me it
> whould be very simple but I am not able to connect so I can see (pull)
> the resources on the server.
>
> Hopt this makes sense and someone can give me some to get past this
> problem.
>
> Thanks
>
> Lee

On Sun, 30 Aug 2009 20:41:39 -0500, "Bob Lin \(MS-MVP\)"
<(E-Mail Removed)> wrote:

>Do a simple test. can you ping a remote computer by IP?

Yes I can. I have done more. Turned on the firewall tracing and
found that the GRE messages are being dropped. I have checked both
the input and output filters and they should let the GRE messages
past. I am confused.

When I configure the RARS, the system requires I use the Custom
configuration because less than two network interfaces were detected
on my machine. I have four, but three are disabled because I read
about Multi-homed DC's. I use static address assignment from
192.168.1.30 to 192.168.1.39.

I believe I have a configuration problem since I use a single NIC and
have both the DC and DHCP on the same processor. We are a small
office of ablut 7 staff members, so there are some limitations.

First of all, it is not recommended to enable RRAS in a DC. If you do, you
may have name resolution and connectivity issue. I haven't tested windows
2008, but in Windows 2003, you may re-configure DNS and WINS. This search
result may help.
Name resolution on VPN
Resolution: Name resolution and connectivity issues on a RRAS that
also runs DC, DNS or WINS. How to assign DNS and WINS on VPN client manually
....
www.chicagotech.net/nameresolutionpnvpn.htm


--
Bob Lin, Microsoft-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com


<(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> On Sun, 30 Aug 2009 20:41:39 -0500, "Bob Lin \(MS-MVP\)"
> <(E-Mail Removed)> wrote:
>
>>Do a simple test. can you ping a remote computer by IP?
>
> Yes I can. I have done more. Turned on the firewall tracing and
> found that the GRE messages are being dropped. I have checked both
> the input and output filters and they should let the GRE messages
> past. I am confused.
>
> When I configure the RARS, the system requires I use the Custom
> configuration because less than two network interfaces were detected
> on my machine. I have four, but three are disabled because I read
> about Multi-homed DC's. I use static address assignment from
> 192.168.1.30 to 192.168.1.39.
>
> I believe I have a configuration problem since I use a single NIC and
> have both the DC and DHCP on the same processor. We are a small
> office of ablut 7 staff members, so there are some limitations.

Bob

It sounds like I should investigate the Virtual server software to
accomplish my mission. I will look into that. Thanks for all your
help and advice.

Lee
On Mon, 31 Aug 2009 08:46:32 -0500, "Bob Lin \(MS-MVP\)"
<(E-Mail Removed)> wrote:

>First of all, it is not recommended to enable RRAS in a DC. If you do, you
>may have name resolution and connectivity issue. I haven't tested windows
>2008, but in Windows 2003, you may re-configure DNS and WINS. This search
>result may help.
>Name resolution on VPN
> Resolution: Name resolution and connectivity issues on a RRAS that
>also runs DC, DNS or WINS. How to assign DNS and WINS on VPN client manually
>...
> www.chicagotech.net/nameresolutionpnvpn.htm