Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 176
  • Last Modified:

windows nt Authenticate to windows 2000 over vpn

hello all i have remote access set up most people have no problem authenticating to my win2k server behind my pix.
problem is one co worker uses winnt from home and he cant seem to map or authenticate to m doman. the cisco client informs him he is connected to my firewall but he cant go on further
0
briankeegan
Asked:
briankeegan
  • 7
  • 5
  • 4
1 Solution
 
adamdrayerCommented:
can you ping the DC or any of the firewalls behind the DC?
0
 
adamdrayerCommented:
wow. that should have read:
can you ping the DC or any of the computers behind the firewall?
0
 
briankeeganAuthor Commented:
he has not tried to but he tried to net use * \\192.168.30.10\app
and he got "cant find network path"
0
Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

 
jamesreddyCommented:
Is DSCLIENT installed on the NT machine?
0
 
adamdrayerCommented:
Is he using a DLS/Cable router?  is he using a VPN device?
0
 
briankeeganAuthor Commented:
he has a cable router at home that does dhcp for him. as far as dsclient i am 90% sure he does not have it.
0
 
jamesreddyCommented:
He said he is not connecting through a PIX via VPN...but he stated he was trying to authenticate to the domain.  AD domains would require DSCLIENT to be installed to authenticate.
0
 
jamesreddyCommented:
He said he IS...excuse me.  Typo.
0
 
jamesreddyCommented:
Tell him to download and install DSCLIENT on NT.  Check out the following link for info and download details.  See if it helps.

http://www.petri.co.il/dsclient_for_win98_nt.htm

0
 
briankeeganAuthor Commented:
thanks guys allot
0
 
briankeeganAuthor Commented:
ok we tried all of this last night. still to no avail . any other ideas? or does winnt over cisco client(ipsec) connecting to a win2k server always cause this issue?
0
 
adamdrayerCommented:
can you ping the DC or any of the computers behind the firewall?
0
 
briankeeganAuthor Commented:
not able to ping any of the servers. we have  active directory btw
0
 
adamdrayerCommented:

a few things to try..

1. Have him disable all software firewalls like ZoneAlarm.
2. Make sure his cable router is not blocking any ports. (53, 137, 139, 445, etc..)
3. add a route to the internal network like so:
"route -p add 192.168.1.0 mask 255.255.255.0 w.x.y.z"
Where 192.168.1.0 is the internal network of your main office, 255.255.255.0 is the subnet mask, and w.x.y.z is the external IP address of PIX

Now try and ping the IP address of the DC or any computer at the office.  not the computername but the IP address.
0
 
briankeeganAuthor Commented:
well what worked was finally getting a smartnet then then 6.3 then nat-t now he works
0
 
briankeeganAuthor Commented:
I am ot sure how to close this . but thanks guys/gals for the help
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 7
  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now