Solved

Printing Connected to VPN

Posted on 2004-10-18
15
240 Views
Last Modified: 2010-04-12
I have a user that works from home and connects to our network through a VPN. He is running W2K SP4 (which I reinstalled) on his laptop. He has a printer at home connected to a Windows ME PC. Whenever he connects to the VPN he can use the printer and view the shares on the ME PC. If he isn't connected to the VPN he can't. He can resolve the name of the PC. I spent several hours and tried a lot of different things (too numerous to even mention) to solve the problem but haven't come up with a solution.
0
Comment
Question by:susancarruth
  • 7
  • 6
15 Comments
 
LVL 23

Expert Comment

by:Tim Holman
ID: 12337720
Is he pulling down a group policy via the VPN ?
Can he PING the ME PC from his laptop ?
0
 

Author Comment

by:susancarruth
ID: 12337764
We don't have any group policies set. He can ping the ME PC by name and address.
0
 
LVL 23

Expert Comment

by:Tim Holman
ID: 12337804
If he can ping, he can print.
I would hazard a guess at there being some firewall software on the other ME machine that is only allowing a connection from your VPN pool, rather than his own private pool.
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 

Author Comment

by:susancarruth
ID: 12337834
He does have Zone Alarm running. We disabled it but maybe we should uninstall it completely. Is it possible that uninstalling as opposed to disabling could make a difference?
0
 
LVL 23

Expert Comment

by:Tim Holman
ID: 12338225
If you're using ICS (Internet Connection Sharing) then you need to uninstall / reinstall this if ever you remove ZoneAlarm.

http://support.microsoft.com/default.aspx?scid=kb;en-us;302951

Also, if bits of ZoneAlarm are still on the system, manually remove it:

http://nh2.nohold.net/noHoldCust25/Prod_1/Articles55646/CompleteUninstallNonNT.html

Does logging onto the VPN authenticate the user in any way ?  It could be that the ME resources are being shared as per domain credentials, which would explain why he couldn't access them.

From the laptop, try these commands:

net view \\ME_MACHINE
nbtstat -a ME_MACHINE

Do they list anything ?  Try this with and without the VPN connection.  This will tell me whether or not the sharing ports are open on the ME machine.  If they're not, then chances are the ME machine is preventing this, so you need to open it up.
0
 

Author Comment

by:susancarruth
ID: 12346061
I won't be able to try the fixes until at least Thursday. One other thing that might help.: When he tries to view the shares on the ME machine he gets a message that there are no logon servers available.
0
 
LVL 23

Expert Comment

by:Tim Holman
ID: 12346137
So the laptop is a domain member, but the ME is a workgroup member ?
In this case, make sure usernames and passwords are synchronised on both boxes, and that ME's workgroup name matches the laptop's domain name.
Alternatively, when the laptop tries to access the ME resource, use the syntax - username = me_machine\username, rather than just username, so that the auth process knows to use me_machine's account database.
0
 

Author Comment

by:susancarruth
ID: 12346246
The ME machine doesn't have a logon. I did try using the username syntax but cam up with the same error.
0
 
LVL 23

Expert Comment

by:Tim Holman
ID: 12346299
Am I right in saying the laptop is a domain member, but the ME is a workgroup member ?
0
 

Author Comment

by:susancarruth
ID: 12356671
That's correct. The ME machine's morkgroups has the same name as the domain.
0
 
LVL 23

Expert Comment

by:Tim Holman
ID: 12368311
If the ME machine doesn't have a logon, is the printer resource shared to 'Everyone' ?
0
 

Author Comment

by:susancarruth
ID: 12466241
I was able to fix the problem - sort of. I ran a net use command from the 2000 to the ME machine. After that he could browse that machine AND map a network drive. He couldn't map one or browse before I used the net use command.

I ran the command like this:
net use \\machine_name /user:username(on ME machine)

I still don't know what caused it, but at lease now it's fixed. Every so often the error comes up again but I just created a .bat file to run the command since any other troubleshooting would probably require me to have the laptop and he doesn't have a convenient time to let go of it.
0
 
LVL 23

Expert Comment

by:Tim Holman
ID: 12479157
Doing a net use to the machine name alone will effectively enable access to all shares on that machine without having to authenticate - maybe the logon syntax was incorrect ?
0
 
LVL 1

Accepted Solution

by:
Computer101 earned 0 total points
ID: 15584303
PAQed with points refunded (500)

Computer101
EE Admin
0

Featured Post

Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
printer shows as offline while connected to vpn 13 128
Which is more secure: EAP or machine certificate for IKEv2 VPN? 1 135
VPN issue 2 66
Cisco ASA VPN Client Routing 8 40
One of the Top 10  common Cisco VPN problems are not-matching shared keys. This is an easy one to fix, but not always easy to notice, see the case below. A simple IPsec tunnel between fast Ethernet interfaces of routers SW1 (f1/1) and R1(f0/0). …
When you connect to your workplace's VPN, you may not notice that you are using your workplace's servers to serve up webpages.  This might be undesirable since the workplace can log all the places you've been.  It also might be very slow to load pag…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question