Network_Padawan
asked on
RRAS VPN and access to AD shares
Hi,
We have DFS shares that our AD users access. We also have RRAS setup and the problem we have is that people that VPN into the network with their AD username and password, cant access these shares that the people who login to the AD and the head office can.
It always comes up with the error: "\\domain\share" you do not have sufficient permission. What permissions to I need to add to allow remote vpn users to gain access to these shares?
We have DFS shares that our AD users access. We also have RRAS setup and the problem we have is that people that VPN into the network with their AD username and password, cant access these shares that the people who login to the AD and the head office can.
It always comes up with the error: "\\domain\share" you do not have sufficient permission. What permissions to I need to add to allow remote vpn users to gain access to these shares?
ASKER
Hi Rob,
The machines are not on the domain as they are the laptops they work from because they work full-time in geographically sparse areas (regional areas). Ive read your article and it refers to DNS resolution through a vpn connection. We have that and thats fine, the problem we have is that even though the share gives all AD users full rights to these shares, these users log in via VPN and can see the shares....but they can not access it.
They get the following error:
"\\domain name or ip\share name\ is not accessible. You might not have permissions to use this network resource. Contact the administrator of this server to find out if you have permission.
Access is denied"
The machines are not on the domain as they are the laptops they work from because they work full-time in geographically sparse areas (regional areas). Ive read your article and it refers to DNS resolution through a vpn connection. We have that and thats fine, the problem we have is that even though the share gives all AD users full rights to these shares, these users log in via VPN and can see the shares....but they can not access it.
They get the following error:
"\\domain name or ip\share name\ is not accessible. You might not have permissions to use this network resource. Contact the administrator of this server to find out if you have permission.
Access is denied"
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hi Rob,
The dns suffix indeed did work. Thanks for your help.
The dns suffix indeed did work. Thanks for your help.
Good to hear the DNS sufix worked. Thanks Network_Padawan.
Cheers!
--Rob
Cheers!
--Rob
http://msmvps.com/blogs/robwill/archive/2008/05/10/vpn-client-name-resolution.aspx