[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 636
  • Last Modified:

Domain Account Lockouts and Cisco VPN

I have a laptop that is sitting on a home workgroup connecting to a Cisco VPN. The work network is a Windows 2000 domain. The laptop connects to VPN fine, but anytime the laptop tries to touch anything on the work network I get a error saying the account is locked out. The local user account on the laptop is the same as the the domain user account at work. Is this what's causing the lockouts?

Thanks,

Justin
0
Justin Durrant
Asked:
Justin Durrant
1 Solution
 
Adam LeinssCommented:
Cisco ACS is probably using Windows NT authenication to create the tunnel.

Then you are using a local account on your box to access resources on the company's network.

Although you have the same account, they have different SIDs.  So when you go to \\SOMEDC1\SOMEFOLDER, it probably has permissions for somdc1\someuser and not localpc\someuser.

How about joining your local box to the domain via the VPN tunnel and then logging into the work domain while you have the tunnel created?  When you close the tunnel, just pick "Workstation Only" to log in locally to your machine?
0
 
valiconCommented:
Have you made sure that your domain account is not locked out?  I would check that first, make sure that the domain account is not locked out and then try to vpn in.
0
 
talphiusCommented:
I've had similar issues with my laptop in the same configuration (Cisco Client VPN running on a non-domain member laptop connecting to Windows 2000 Domain with Cisco PIX - My usernames are the same locally and on domain).  

The workaround I use is to keep my local user account password the same as my domain password.  Works for me...
0
 
Justin DurrantAuthor Commented:
I changed the user name on the laptop and all is well.. Thanks guys
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now