Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


VPN/Remote User cannot access a Server

Posted on 2013-12-20
Medium Priority
Last Modified: 2014-01-10

We have a remote user who needs access to a server. They've never had a problem in the past. They can VPN into our network using their domain credentials but they cannot remote into the specific server that they need. The connection times outs. Users on the internal network can access the server.

It looks like one of our DHCP servers is rejecting them? I'm not sure how it could be a PW issue. The same credentials that allow the users to access the network via VPN should allow them access to the server.

User XXX was denied access.

Proxy-Policy-Name = Connection request policy
Authentication-Provider = Windows
Authentication-Server = <undetermined>
Policy-Name = <undetermined>
Authentication-Type = PAP
EAP-Type = <undetermined>
Reason-Code = 16
Reason = Authentication was not successful because an unknown user name or incorrect password was used.
Question by:grindsmygeaqrs
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2

Expert Comment

ID: 39732191
maybe try domain\username instead of just username when prompted for the credentials.

Author Comment

ID: 39732208
They can't reach the machine itself to even enter them.
LVL 13

Expert Comment

by:Michael Machie
ID: 39732219
The message does specify a credential issue so trying IKtech's suggestion should be the first option.

You also may want to try using the IP address of the server rather than Name. I say this because if you have a VPN group that is configured for split-tunnel, DNS resolution may be a problem, resulting in the inability to find your servers by name. The split-tunnel is used to allow the VPN connected User to access their local resources for internet and peripherals while still allowing access to the Enterprise servers/shares via IP.
Also, re-verify that the User is part of the Remote Users Group. If this access is taken away then they won't be able to RDP either.
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.


Expert Comment

ID: 39732230
what type of vpn server are you using?  Is it windows?  Can you connect the same way with a different PC and your user credentials?  Can you connect using a different PC and the users credentials?

If you can connect using a different pc and the user credentials it would seem the problem is associated with the users PC whether it is a reinstall of the vpn client or a setting or other at least you can narrow it down to the users PC.

If you can't connect using a different PC and the users credentials it would seem something is wrong with the users account.

Can the user connect to other resources after connecting to the VPN server?

You might also check the firewall on the server.

Author Comment

ID: 39732454
We use Cisco ASA for VPN. They can remote into other machines on the network.. just not that one. Also, I can remote into the machine from internally on the network.
LVL 13

Accepted Solution

Michael Machie earned 2000 total points
ID: 39732642
I would check the Remote Users group and make sure that User is added. If you are a domain admin you will be able to RDP regardless of the group settings.
LVL 13

Expert Comment

by:Michael Machie
ID: 39772748
Glad this is resolved for you and thanks!

Featured Post

What Is Blockchain Technology?

Blockchain is a technology that underpins the success of Bitcoin and other digital currencies, but it has uses far beyond finance. Learn how blockchain works and why it is proving disruptive to other areas of IT.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A safe way to clean winsxs folder from your windows server 2008 R2 editions
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question