grindsmygeaqrs
asked on
VPN/Remote User cannot access a Server
Hello,
We have a remote user who needs access to a server. They've never had a problem in the past. They can VPN into our network using their domain credentials but they cannot remote into the specific server that they need. The connection times outs. Users on the internal network can access the server.
It looks like one of our DHCP servers is rejecting them? I'm not sure how it could be a PW issue. The same credentials that allow the users to access the network via VPN should allow them access to the server.
User XXX was denied access.
Proxy-Policy-Name = Connection request policy
Authentication-Provider = Windows
Authentication-Server = <undetermined>
Policy-Name = <undetermined>
Authentication-Type = PAP
EAP-Type = <undetermined>
Reason-Code = 16
Reason = Authentication was not successful because an unknown user name or incorrect password was used.
We have a remote user who needs access to a server. They've never had a problem in the past. They can VPN into our network using their domain credentials but they cannot remote into the specific server that they need. The connection times outs. Users on the internal network can access the server.
It looks like one of our DHCP servers is rejecting them? I'm not sure how it could be a PW issue. The same credentials that allow the users to access the network via VPN should allow them access to the server.
User XXX was denied access.
Proxy-Policy-Name = Connection request policy
Authentication-Provider = Windows
Authentication-Server = <undetermined>
Policy-Name = <undetermined>
Authentication-Type = PAP
EAP-Type = <undetermined>
Reason-Code = 16
Reason = Authentication was not successful because an unknown user name or incorrect password was used.
maybe try domain\username instead of just username when prompted for the credentials.
ASKER
They can't reach the machine itself to even enter them.
The message does specify a credential issue so trying IKtech's suggestion should be the first option.
You also may want to try using the IP address of the server rather than Name. I say this because if you have a VPN group that is configured for split-tunnel, DNS resolution may be a problem, resulting in the inability to find your servers by name. The split-tunnel is used to allow the VPN connected User to access their local resources for internet and peripherals while still allowing access to the Enterprise servers/shares via IP.
Also, re-verify that the User is part of the Remote Users Group. If this access is taken away then they won't be able to RDP either.
You also may want to try using the IP address of the server rather than Name. I say this because if you have a VPN group that is configured for split-tunnel, DNS resolution may be a problem, resulting in the inability to find your servers by name. The split-tunnel is used to allow the VPN connected User to access their local resources for internet and peripherals while still allowing access to the Enterprise servers/shares via IP.
Also, re-verify that the User is part of the Remote Users Group. If this access is taken away then they won't be able to RDP either.
what type of vpn server are you using? Is it windows? Can you connect the same way with a different PC and your user credentials? Can you connect using a different PC and the users credentials?
If you can connect using a different pc and the user credentials it would seem the problem is associated with the users PC whether it is a reinstall of the vpn client or a setting or other at least you can narrow it down to the users PC.
If you can't connect using a different PC and the users credentials it would seem something is wrong with the users account.
Can the user connect to other resources after connecting to the VPN server?
You might also check the firewall on the server.
If you can connect using a different pc and the user credentials it would seem the problem is associated with the users PC whether it is a reinstall of the vpn client or a setting or other at least you can narrow it down to the users PC.
If you can't connect using a different PC and the users credentials it would seem something is wrong with the users account.
Can the user connect to other resources after connecting to the VPN server?
You might also check the firewall on the server.
ASKER
We use Cisco ASA for VPN. They can remote into other machines on the network.. just not that one. Also, I can remote into the machine from internally on the network.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Glad this is resolved for you and thanks!