Connecting to resources over a SBS 2003 VPN
TCC@discussions.microsoft.com Neil TCC
I have set up a VPN on a SBS 2003 machine, i am using Windows XP SP2 clients
to connect to the VPN.
When a user logs on they authenticate fine however they can only gain access
to limited resources, i have tried browsing the Network, however it only
picks up the computer that they are using, not the server or other PC's.
If i use the command \\server name it will only pick up the folder
containing the users My documents, none of the other numerous shares.
Permisions are set to allow access to all the other shares.
Can anyone help please.
Regards
Neil
Can anyone help please
Joe
Join the clients to the domain. Nothing less than that will give proper
network browsing. And SBS has a number of default configurations to
discourage VPN client machines from getting TCP/IP access to the whole
network.
Edward Tian
Thank you for posting here.
From your description, the remote client can establish the VPN tunnel
successfully, but won't be able to access the shared resources from the
internal network. If I am off-base, please feel free to let me know.
To narrow down the issue, I'd like to check the following information:
1. Do you have your ISA server installed? If so, which version do you
install? ISA2000 or ISA2004?
Is SBS 2003 SP1 applied? This is a known bug for Windows 2003 SP1+ISA
server 2000. In this scenario, the VPN tunnel can be established but no
traffic can go through. You can try the resolution in the article below:
897651 VPN clients can no longer access internal resources after you
install Windows Server 2003 Service Pack 1 on a computer that is running
ISA Server 2000:
http://support.microsoft.com/?id=897651
Note: According to the article, we should not only obtain the Hotfix but
also modify the registry.
If there is no ISA installed, the problem could be related to the routing
table. Use 'route print' command to collect the routing information from
both the server and the VPN client and then paste the result to me for
further analysis.
2. Have you added this remote client to the domain?
3. Can the problem be reproduced on all the remote clients or just one?
4. Can you ping the internal IP address of the server from your remote
client? You can try twice by using the IP address and the server name.
5. Can internal users access the other resources which remote user can't
access? Can internal users see all computers (server and all PCs) from My
Network Places?
6. Once the VPN connection is made, run ''ipconfig/all'' result on the VPN
client and paste the result to me at your convenience.
7. Can the remote client access the other shares from using the command
\\computername\sharefolder?
Hope it helps, please do let me know the result of the steps above, I look
forward to hearing from you.
If you have anything unclear, please feel free to let me know, I am glad to
be of the assistance.
Have a nice day, Neil!
Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
Neil TCC
Sorry for the delay i had a problem with my Net passport as i could not view
this thread.
Yes you are right regarding the tunnel connecting, just to let you know we
are using
In response to your questions:-
1: SBS 2003 Standard so ISA server is not installed.
Service PAck 1 is applied
The routing table for the server is:-
Active Routes:
Network Destination Netmask Gateway Interface
Metric
0.0.0.0 0.0.0.0 192.168.0.1
192.168.0.254 1
82.118.121.88 255.255.255.255 192.168.0.1
192.168.0.254 1
127.0.0.0 255.0.0.0 127.0.0.1
127.0.0.1 1
169.254.0.0 255.255.0.0 169.254.254.223
169.254.254.223 10
169.254.254.223 255.255.255.255 127.0.0.1 127.0.0.1
10
169.254.255.255 255.255.255.255 169.254.254.223 169.254.254.223
10
192.168.0.0 255.255.255.0 192.168.0.254
192.168.0.254 20
192.168.0.56 255.255.255.255 127.0.0.1
127.0.0.1 50
192.168.0.254 255.255.255.255 127.0.0.1 127.0.0.1
20
192.168.0.255 255.255.255.255 192.168.0.254
192.168.0.254 20
224.0.0.0 240.0.0.0 169.254.254.223
169.254.254.223 10
224.0.0.0 240.0.0.0 192.168.0.254
192.168.0.254 20
255.255.255.255 255.255.255.255 169.254.254.223 169.254.254.223
1
255.255.255.255 255.255.255.255 192.168.0.254 192.168.0.254
1
Default Gateway: 192.168.0.1
===========================================================================
Persistent Routes:
None
Client when the VPN is enabled is as follows:-
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface
Metric
0.0.0.0 0.0.0.0 192.168.0.1
192.168.0.20 21
0.0.0.0 0.0.0.0 192.168.0.53
192.168.0.53 1
83.105.49.143 255.255.255.255 192.168.0.1 192.168.0.20
20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1
1
192.168.0.0 255.255.0.0 192.168.0.20 192.168.0.20
20
192.168.0.20 255.255.255.255 127.0.0.1 127.0.0.1
20
192.168.0.53 255.255.255.255 127.0.0.1 127.0.0.1
50
192.168.0.255 255.255.255.255 192.168.0.20 192.168.0.20
20
192.168.0.255 255.255.255.255 192.168.0.53 192.168.0.53
50
224.0.0.0 240.0.0.0 192.168.0.20
192.168.0.20 20
224.0.0.0 240.0.0.0 192.168.0.53
192.168.0.53 1
255.255.255.255 255.255.255.255 192.168.0.20 192.168.0.20
1
255.255.255.255 255.255.255.255 192.168.0.20 4
1
255.255.255.255 255.255.255.255 192.168.0.53 192.168.0.53
1
Default Gateway: 192.168.0.53
===========================================================================
Persistent Routes:
None
2: Clients have been added to the Domain, they connect to resources fine
when they are i the LAN, the problem only occurs over the VPN
3: I am trying to connect two clients and both are having the same problem,
i have also tried to use the VPN on clients not part of this domain, again
they authenticate fine but cannopt browse any Network locations, however it
seems that a lot more packets are sent and received using the machines that
are not part of the domain.
4: Can Ping the IP Address but not the server name
5: Internal users can connect fine
6:Windows IP Configuration
Host Name . . . . . . . . . . . . : SimonJan05
Primary Dns Suffix . . . . . . . : FUAL.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : FUAL.local
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8169/8110 Family Gigab
Ethernet NIC
Physical Address. . . . . . . . . : 00-01-4A-1C-57-5F
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.20
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.1
Lease Obtained. . . . . . . . . . : 20 July 2005 10:21:05
Lease Expires . . . . . . . . . . : 23 July 2005 10:21:05
Ethernet adapter Wireless Network Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2200BG Netw
Connection
Physical Address. . . . . . . . . : 00-0E-35-B6-7C-7B
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 0.0.0.0
Subnet Mask . . . . . . . . . . . : 0.0.0.0
Default Gateway . . . . . . . . . :
DHCP Server . . . . . . . . . . . : 255.255.255.255
PPP adapter FUAL:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.52
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 192.168.0.52
DNS Servers . . . . . . . . . . . : 192.168.0.254
Primary WINS Server . . . . . . . : 192.168.16.2
7: No we cannot connect using \\servername\shared folder
Many thanks for your help on this one i look forward to hearing from you.
Kind Regards
Neil TCC
Edward Tian
Thank you for your reply.:)
According to the routing table you provided, I notice that both your remote
VPN client and your SBS server are using a same subnet network
(192.168.0.0/255.255.0.0). That is the root cause of your issue.
Hi Neil:
Thank you for your reply.:)
According to the routing table you provided, I notice that both your remote
VPN client and your SBS server are using a same subnet network
(192.168.0.0/255.255.0.0). That is the root cause of your issue.
Technically speaking, the system uses route table to route IP traffics. By
default, the local subnet does not need route. The system will use
broadcast to find local clients or send traffic directly to the local
address. In your case, the remote client has the IP address which is in the
range of your local subnet. Once the VPN client tries to access the
resource in the destination network (where the VPN server resides), it will
not find the way out since its route table treat the request as a local
network request. That's why there is no response from the server.
In the routing table, we can find this route item:
192.168.0.0 255.255.0.0 192.168.0.20 192.168.0.20 20
That is to say, all requests to the subnet 192.168.x.x are sent to
192.168.0.20 (the local network adapter of the VPN client). So the traffic
is failed to send to the correct gateway (192.168.0.53).
1. To resolve this issue, we need to use different subnet addressing in the
VPN client and VPN server sites. For example, assign 10.0.0.x to the VPN
client side and 192.168.x.x to the SBS Server side. That is the recommended
configuration to establish a VPN connection.
2. I would also like to provide a workaround to you if it seems difficult
to change the subnet addressing.
To work around this problem, you can try the following method:
In your client, add a static routing after the VPN connection is
established.
- Click Start, Run, type CMD
- Type "route add <remote end IP> MASK 255.255.255.255 <IP address of your
VPN PPP adapter>"
- Type "route print". You will see a routing entry is added. The
destination IP is the route end client's IP. Subnet MASK is
255.255.255.255. The Gateway is your VPN gateway's IP.
Hope this helps, I look forward to hearing from you. If anything is
unclear, please feel to let me know, I am glad to be of assistance.
Have a nice day, Neil!:)
Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Connecting to resources over a SBS 2003 VPN
| thread-index: AcWNDiqWl9o+P3yjSjKYUAsN7pz4qw==
| X-WBNR-Posting-Host: 82.118.121.88
| From: "=?Utf-8?B?TmVpbCBUQ0M=?=" <Nei...@discussions.microsoft.com>
| References: <55B46F8D-0CE3-46C4...@microsoft.com>
<$SP$Gu3iFH...@TK2MSFTNGXA01.phx.gbl>
| Subject: RE: Connecting to resources over a SBS 2003 VPN
| Date: Wed, 20 Jul 2005 02:34:03 -0700
| Lines: 236
| Message-ID: <DC709D03-F592-4D26...@microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:137368
| X-Tomcat-NG: microsoft.public.windows.server.sbs
Neil TCC
I changed the Server LAN onto a different IP range as most locations the
clienst are using will be on the 192.168.0 range.
Now the server is on a different IP range the VPN works perfectly.
Many Thanks again.
Just one quick point, i seem to only be able to connect one client at a time
over the VPN, is there an easy way to change this? I am using the SBS2003
standard default settings so there are 5 Ports available, however i seem to
only be able to connect one at a time.
Kind Regards and many thanks
Edward Tian
I am glad to hear that the problem has been resolved. That's cool! :)
Regarding your concern in the latest reply, we can run Remote Access Wizard
to configure the VPN connection.
1. Open Server management console, navigate to 'Internet and E-mail', on
the right panel, click 'Configure Remote Access'.
2. Check 'VPN access' and click Next.
3. Type the FQDN or public ip address under Server name and click Next.
4. Click Finish.
After that, you will find that 5 PPTP connection is present in the RRAS
snap-in.
Please make sure CEICW have been configured correctly, you can refer to
following KB article for detailed information:
825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763
In addition, you should check if there are enough IP addresses to lease.
Please open DHCP snap-in, navigate to "Address Leases", make sure 10 new
Client IP Addresses are added after you ran the Remote Access Wizard.
I hope this helps, please do let me know if anything is unclear. I look
forward to hearing from you.
Have a nice day, Neil! :-)
| thread-index: AcWYAja3Sr+K8yfwSF6XyycB1Thi2g==
| X-WBNR-Posting-Host: 82.118.121.88
| From: "=?Utf-8?B?TmVpbCBUQ0M=?=" <Nei...@discussions.microsoft.com>
| References: <55B46F8D-0CE3-46C4...@microsoft.com>
<$SP$Gu3iFH...@TK2MSFTNGXA01.phx.gbl>
<DC709D03-F592-4D26...@microsoft.com>
<I9kMpEaj...@TK2MSFTNGXA01.phx.gbl>
| Subject: RE: Connecting to resources over a SBS 2003 VPN
| Date: Wed, 3 Aug 2005 01:06:12 -0700
| Lines: 320
| Message-ID: <E473F7D1-7CA2-4B66...@microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:141049
| X-Tomcat-NG: microsoft.public.windows.server.sbs
Neil TCC
Thanks for your reply, the problem i am getting is error 721 The remote
computer did not respond, this happens when i attempt to connect from a
second client after the first one is connected.
It gets as far as the verifying username and password and then gives the 721
error.
I have followed your instructions in the prvious message but am still
getting the same problem
Hope you can help.
Neil
Joe
> Hi Edward,
>
> Thanks for your reply, the problem i am getting is error 721 The remote
> computer did not respond, this happens when i attempt to connect from a
> second client after the first one is connected.
>
> It gets as far as the verifying username and password and then gives the 721
> error.
>
> I have followed your instructions in the prvious message but am still
> getting the same problem
>
This is more likely to be a function of your router than of SBS. I had
a quick look but can't see any mention of your router hardware. Routers
all broadly do the same things, but individual details can vary widely
and can be difficult to ascertain. One of these details is how many
simultaneous VPN connections can be maintained.
You may be aware that a PPTP VPN uses port 1723 of the TCP protocol, and
also protocol 47. The user verification, followed by error 721, is
usually a sign that protocol 47 is not getting through. 1723/TCP is
concerned with VPN control and other 'housekeeping', and all the data is
carried on protocol 47. It is entirely possible that the router is
capable of keeping track of many simultaneous TCP connections, but only
one protocol 47 connection.
This type of detail is rarely found in the router specification, unless
its manufacturer wants to boast about a particularly large number of
VPN tunnels supported. My advice at the moment would be to try to get
hold of another router, at least on loan, to see if the problem still
occurs. I'm not familiar with a range of hardware, but I know that the
Netgear DG834 can support at least two PPTP VPNs.
Another thought occurs: you didn't (I think) say whether the second
client was at the same physical location as the first. If so, that adds
a further level of complexity, in that the routers at both ends have
to be able to keep track of simultaneous connections on the same ports
between the same two IP addresses, and yet sort out the message streams
to the right machines at the remote end. This is also an undocumented
area where all routers are not created equal. I'm not even certain that
SBS can keep track of multiple VPNs apparently originating on the same
remote IP address. Probably it can, or we would know otherwise by now.
Edward Tian
Thank you for your update! Hi Joe, thanks for your detailed suggestion. :)
Based on my research, error 721 is usually caused by GRE packet not
properly being allowed on a router.
1. If you have a router on either the server side or the client side, we
should do the following test:
In order to find out whether the router is the root cause, you can try to
initiate two VPN connections from the internal clients to the server
simultaneously, if both VPN tunnels can be established successfully, you
may need to contact the firewall vendor for more instructions or replace a
router which supports multiple VPN connections.
For your information:
In order to pass PPTP, we need to enable TCP port 1723, as well as an
additional IP port 47 (GRE protocol) on all routers and firewalls between a
PPTP client and a PPTP server.
If you don't know how to do so, the recommendation is always to contact the
firewall vendor for detailed instructions. For example, you can check if
you need to update the hardware firewall's firmware to the latest version,
and if any more configurations are needed.
GRE Protocol 47 Packet Description and Use
http://support.microsoft.com/default.aspx?scid=KB;[LN];241251
2. If problem doesn't reside in the router side, we may need a further
investigation. Please help me collect the following information:
a. How many external Nics does your server have? If you have multiple
external adapters on your server, you should refer to this article:
PPTP clients cannot connect to a PPTP server that has multiple IP addresses
http://support.microsoft.com/default.aspx?scid=KB;EN-US;271731
b. As Joe mentioned, can you tell me whether the second client is at the
same physical location as the first one? Please try connecting to the
Server simultaneously from two different places, this helps to narrow down
the issue. You can tell me the result at your convenience.
c. Please send the Rraslog to me for analysis.
You can find it at C:\Program Files\Microsoft Windows Small Business
Server\Support\rraslog.txt (By default)
Please send the file directly to my mailbox: v-ed...@microsoft.com
I appreciate your understanding and effort. I look forward to hearing from
you.
Have a nice day, Neil! :)
| thread-index: AcWYN/pbeoLlg+8lRN62RRC772QsEg==
| X-WBNR-Posting-Host: 83.105.49.143
| From: "=?Utf-8?B?TmVpbCBUQ0M=?=" <Nei...@discussions.microsoft.com>
| References: <55B46F8D-0CE3-46C4...@microsoft.com>
<$SP$Gu3iFH...@TK2MSFTNGXA01.phx.gbl>
<DC709D03-F592-4D26...@microsoft.com>
<I9kMpEaj...@TK2MSFTNGXA01.phx.gbl>
<E473F7D1-7CA2-4B66...@microsoft.com>
<r7xg#KBmFH...@TK2MSFTNGXA01.phx.gbl>
| Subject: RE: Connecting to resources over a SBS 2003 VPN
| Date: Wed, 3 Aug 2005 07:31:04 -0700
| Lines: 318
| Message-ID: <F9DFDEE2-F15C-4EEA...@microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:141124
| X-Tomcat-NG: microsoft.public.windows.server.sbs
Neil TCC
It seems that the Router i am using is the problem, it is a Netgear DG834GT
108 Mbps Router, after your comments i contacted Netgear and they told me
that it will only accept one VPN passthrough at a time.
Many thanks for your help on this one, it looks like we will need to get a
new Router.
Thanks again
Neil
Joe
> Thanks Edward and Joe,
>
> It seems that the Router i am using is the problem, it is a Netgear DG834GT
> 108 Mbps Router, after your comments i contacted Netgear and they told me
> that it will only accept one VPN passthrough at a time.
>
> Many thanks for your help on this one, it looks like we will need to get a
> new Router.
>
How extremely odd. The DG834G certainly supports at least two PPTP VPNs,
as I have been connected for admin and noted one of the users was also
on. This client has a remote user connected most of the day for VOIP,
and this does not stop another connection.
Seems a bit of a backward step, unless they're doing a Microsoft and
pushing more demanding users towards higher-priced kit...
Edward Tian
Thank you for your reply. I appreciate your time and cooperation! :)
Finally it comes to the conclusion that the problem resides in the router
side. I am sorry that I didn't assist in resolving your second problem, the
router side issue is out of our support boundary, I hope for your
understanding.
It is my pleasure to work with you in this post. If you encounter any
difficulties in the future, please submit the post to the newsgroup. I will
always try my best for assistance.
Again, thank you for using Microsoft newsgroup.
Have a nice day. :)
| thread-index: AcWZon5CwxxH+7pUR/aDcImWMHEu1Q==
| X-WBNR-Posting-Host: 82.118.121.88
| From: "=?Utf-8?B?TmVpbCBUQ0M=?=" <Nei...@discussions.microsoft.com>
| References: <55B46F8D-0CE3-46C4...@microsoft.com>
<$SP$Gu3iFH...@TK2MSFTNGXA01.phx.gbl>
<DC709D03-F592-4D26...@microsoft.com>
<I9kMpEaj...@TK2MSFTNGXA01.phx.gbl>
<E473F7D1-7CA2-4B66...@microsoft.com>
<r7xg#KBmFH...@TK2MSFTNGXA01.phx.gbl>
<F9DFDEE2-F15C-4EEA...@microsoft.com>
<1aPfuAO...@TK2MSFTNGXA01.phx.gbl>
| Subject: RE: Connecting to resources over a SBS 2003 VPN
| Date: Fri, 5 Aug 2005 02:46:03 -0700
| Lines: 315
| Message-ID: <7C016AD0-95CA-4236...@microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:141791
| X-Tomcat-NG: microsoft.public.windows.server.sbs
SOLONY
the closest solutions that describs my problem. After pain and suffering I
was finally able to establish the VPN on site and off site on various
machines. However, when I establish the connection I can not see anything
except for my own computer and I can not browse the internet when it is
established. That is just one of the obstacles I run into.
Ultimately, I want to enable multiple computers to connect to the SERVER to
use Quick Books remotely. By the way, when I use RWW as administrator I can
see the server and use it. When connecting as a user through RWW I can not
see the one computer I have on the domain. It says it is not connected when
I KNOW it is because iit works the other way around when I am at the office.
I can not put all of my computers on the domain because my users are sharing
peer to peer files.
I hope my post is relevant, otherwise pleaase excuse me. Thanks in advance.
Leonid S. Knyshov
news:15E8B723-5FCA-49BA...@microsoft.com...
>I am very new to SBS 2003 and teaching myself. LOL. This thread is one of
> the closest solutions that describs my problem. After pain and suffering
> I
> was finally able to establish the VPN on site and off site on various
> machines. However, when I establish the connection I can not see anything
> except for my own computer and I can not browse the internet when it is
> established. That is just one of the obstacles I run into.
>
> Ultimately, I want to enable multiple computers to connect to the SERVER
> to
> use Quick Books remotely. By the way, when I use RWW as administrator I
> can
Please complete all wizards in your Todo list.
It is extremely simple to setup VPN on SBS. If that's not working, some of
the wizards may not have been run. May I recommend locating a local SBS
specialist to make sure your server is configured properly?
http://www.microsoft.com/smallbusiness/partner/vendorsearch.mspx
We do not recommend accessing Quickbooks files over VPN due to the fact that
Quickbooks files tend to be rather large, which would cause the performance
to be quite unbearable, and recommend a terminal services server to handle
this scenario instead. Remote Web Workplace was designed to handle your
requirement, which would enable you to provide secure remote access to your
terminal services server without the need to establish a VPN connection.
Your users will thank you. :-)
You will not be able to browse Internet while connected through VPN. Such a
scenario is called "split tunnell" and not supported natively under Windows
XP. It's supported with Cisco VPN client, for example. Now, if your network
is properly configured on the other end, you would be able to browse
Internet through VPN using your remote network.
--
Leonid S. Knyshov, CEO
Crashproof Solutions, LLC - http://www.crashproofsolutions.com
MCP Exchange 2003/Small Business Server 2003, CCNA, SCSA 8, NCIE
Microsoft Small Business Specialist Partner
Edward Tian
Thanks for your post.
If you are using ISA 2000 with SBS Server 2003, you may encounter the known
issue that VPN client cannot browse and access the internal resources:
VPN clients can no longer access internal resources after you install
Windows Server 2003 Service Pack 1 on a computer that is running ISA Server
2000
http://support.microsoft.com/?id=897651
In addition, I suggest you create a new thread for this issue so that my
colleagues and I will continue to work on the issue with you in the new
thread.
Thanks for your time and understanding.
Have a nice day!
Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
PLEASE NOTE the newsgroup SECURE CODE and PASSWORD will be updated at 9:00
AM PST, February 14, 2006. Please complete a re-registration process by
entering the secure code mmpng2006 when prompted. Once you have entered the
secure code mmpng2006, you will be able to update your profile and access
the partner newsgroups.
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Connecting to resources over a SBS 2003 VPN
| thread-index: AcYuQWfkkEllXepDRfWJw9Njb+rr1w==
| X-WBNR-Posting-Host: 68.106.100.40
| From: =?Utf-8?B?U09MT05Z?= <SOL...@discussions.microsoft.com>
| References: <55B46F8D-0CE3-46C4...@microsoft.com>
<$SP$Gu3iFH...@TK2MSFTNGXA01.phx.gbl>
<DC709D03-F592-4D26...@microsoft.com>
<I9kMpEaj...@TK2MSFTNGXA01.phx.gbl>
<E473F7D1-7CA2-4B66...@microsoft.com>
<r7xg#KBmFH...@TK2MSFTNGXA01.phx.gbl>
<F9DFDEE2-F15C-4EEA...@microsoft.com>
<1aPfuAO...@TK2MSFTNGXA01.phx.gbl>
<7C016AD0-95CA-4236...@microsoft.com>
<R3Vv1z9...@TK2MSFTNGXA01.phx.gbl>
| Subject: RE: Connecting to resources over a SBS 2003 VPN
| Date: Fri, 10 Feb 2006 04:56:27 -0800
| Lines: 319
| Message-ID: <15E8B723-5FCA-49BA...@microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:243587
| X-Tomcat-NG: microsoft.public.windows.server.sbs