Avatar of _KeepItSimple_
_KeepItSimple_
 asked on

Cannot Access DFS Share Over VPN

Hello,

One of my clients have Windows 7 Pro based laptops that they use to access the company network via PPTP VPN connections. The VPN connections are provided by a Draytek 2820 router. The laptops are a mix of x86 and x64 architectures.

The issue is that when connected to the VPN the users cannot access drives mapped to DFS shares. When attempting to access a DFS share the users receive a "The user name could not be found" message. The users can connect to shared folders on the servers by using \\server\share.

The issue is caused by the Credential Manager that shows "*Session" when the VPN connection is active. If these credentials are manually removed from the Credential Manager then the user can access DFS shares no problem. However, the credentials re-appear on the next connection.

I know that some people have worked around this issue by editing the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\DisableDomainCreds registry key, however, this client uses the BPOS suite and it seems that the Sign In Tool depends heavily on the credential manager. Setting this registry key stops the sign in tool working.

It seems that this is a fairly common problem that was introduced in Vista and still exists in Win 7.

Can anyone suggest a fix/workaround that won't have a negative impact on the BPOS sign in tool?

Thanks,
David
Windows 7Windows Server 2003Windows Networking

Avatar of undefined
Last Comment
_KeepItSimple_

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
_KeepItSimple_

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Greg Besso

Hmm if the filethat si being edited is uniform across all workstations I'd create an updated copy, place it on the network, and just put some xcopy/copy lines in the login script.
_KeepItSimple_

ASKER
I'm not sure if the file is uniform, but good suggestion. I'll look into it. We're talking about a fairly small number of clients here so it may be easier to just do it manually in this case.

Thanks for your help.
_KeepItSimple_

ASKER
Found solution elsewhere - posted solution on EE.
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck