Printing Connected to VPN

I have a user that works from home and connects to our network through a VPN. He is running W2K SP4 (which I reinstalled) on his laptop. He has a printer at home connected to a Windows ME PC. Whenever he connects to the VPN he can use the printer and view the shares on the ME PC. If he isn't connected to the VPN he can't. He can resolve the name of the PC. I spent several hours and tried a lot of different things (too numerous to even mention) to solve the problem but haven't come up with a solution.
susancarruthAsked:
Who is Participating?
 
Computer101Commented:
PAQed with points refunded (500)

Computer101
EE Admin
0
 
Tim HolmanCommented:
Is he pulling down a group policy via the VPN ?
Can he PING the ME PC from his laptop ?
0
 
susancarruthAuthor Commented:
We don't have any group policies set. He can ping the ME PC by name and address.
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

 
Tim HolmanCommented:
If he can ping, he can print.
I would hazard a guess at there being some firewall software on the other ME machine that is only allowing a connection from your VPN pool, rather than his own private pool.
0
 
susancarruthAuthor Commented:
He does have Zone Alarm running. We disabled it but maybe we should uninstall it completely. Is it possible that uninstalling as opposed to disabling could make a difference?
0
 
Tim HolmanCommented:
If you're using ICS (Internet Connection Sharing) then you need to uninstall / reinstall this if ever you remove ZoneAlarm.

http://support.microsoft.com/default.aspx?scid=kb;en-us;302951

Also, if bits of ZoneAlarm are still on the system, manually remove it:

http://nh2.nohold.net/noHoldCust25/Prod_1/Articles55646/CompleteUninstallNonNT.html

Does logging onto the VPN authenticate the user in any way ?  It could be that the ME resources are being shared as per domain credentials, which would explain why he couldn't access them.

From the laptop, try these commands:

net view \\ME_MACHINE
nbtstat -a ME_MACHINE

Do they list anything ?  Try this with and without the VPN connection.  This will tell me whether or not the sharing ports are open on the ME machine.  If they're not, then chances are the ME machine is preventing this, so you need to open it up.
0
 
susancarruthAuthor Commented:
I won't be able to try the fixes until at least Thursday. One other thing that might help.: When he tries to view the shares on the ME machine he gets a message that there are no logon servers available.
0
 
Tim HolmanCommented:
So the laptop is a domain member, but the ME is a workgroup member ?
In this case, make sure usernames and passwords are synchronised on both boxes, and that ME's workgroup name matches the laptop's domain name.
Alternatively, when the laptop tries to access the ME resource, use the syntax - username = me_machine\username, rather than just username, so that the auth process knows to use me_machine's account database.
0
 
susancarruthAuthor Commented:
The ME machine doesn't have a logon. I did try using the username syntax but cam up with the same error.
0
 
Tim HolmanCommented:
Am I right in saying the laptop is a domain member, but the ME is a workgroup member ?
0
 
susancarruthAuthor Commented:
That's correct. The ME machine's morkgroups has the same name as the domain.
0
 
Tim HolmanCommented:
If the ME machine doesn't have a logon, is the printer resource shared to 'Everyone' ?
0
 
susancarruthAuthor Commented:
I was able to fix the problem - sort of. I ran a net use command from the 2000 to the ME machine. After that he could browse that machine AND map a network drive. He couldn't map one or browse before I used the net use command.

I ran the command like this:
net use \\machine_name /user:username(on ME machine)

I still don't know what caused it, but at lease now it's fixed. Every so often the error comes up again but I just created a .bat file to run the command since any other troubleshooting would probably require me to have the laptop and he doesn't have a convenient time to let go of it.
0
 
Tim HolmanCommented:
Doing a net use to the machine name alone will effectively enable access to all shares on that machine without having to authenticate - maybe the logon syntax was incorrect ?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.