asked on

Issue with VPN clients accessing domain resources

We are currently having an issue in which VPN clients that are domain members cannot access file shares or the exchange server but can ping them by name, yet VPN clients that are NOT domain members CAN access file shares and the exchange server.

We are running a 2003 native AD
ISA 2004 SP2
Exchange 2003
XP clients

Any ideas would be greatly appreciated.

Thanks.

mikeleebrla

sounds to me like you need to check your NTFS security permissions on your folders that you have shared (that is on the security tab on the properties of any folder)

can you elaberate on what you mean they can access the exchange server? how are they accessing it? Outlook client? Outlook Web? POP3? etc etc

CMH_DS

ASKER

We are using Outlook 2003 on the clients.

I can use a non-domain machine via a DSL connection to VPN into the domain, I can configure Outlook 2k3 to connect, I can manually map network drives, everything works fine.. But if I join that machine to the domain, then connect via VPN I cannot map network drives and I cannot access the exchange server with Outlook2k3..

mikeleebrla

are you mapping drives via IP or via netbios names?
try doing it via IP address rather than via netbios names b/c getting netbios names to work over the VPN would be a nightmare.

how are you trying to connect to the exchange server via outlook? MAPI, IMAP, pop3 etc?

CMH_DS

ASKER

We are mapping via netbios names, which I have done at previous companies with no issues, and in this case I can map vie netbios name when connected to the VPN on a NON domain workstation.

We are connecting to exchange via outlook2k3 using the exchange service.

mikeleebrla

well, can you connect via IP like i asked you to test? that will narrow down the problem.

>>We are connecting to exchange via outlook2k3 using the exchange service.
That is called MAPI.

CMH_DS

ASKER

We cannot map via IP address on the domain workstation. This almost seems like an authentication issue on the domain machines via VPN.

CMH_DS

ASKER

500 points

ASKER CERTIFIED SOLUTION

isd503

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

CMH_DS

ASKER

We've got this problem resolved, it was on the ISA server. We had to disable IP Fragment Blocking.

This thread can be closed.