Domains and authentication problems

[SteveC]

Hi all,

Right, Users in India using VPN to get to our network here in England.

The VPN itself works fine. They can ping all PCs in our office, but can only connect (map drives) to all machines apart from the domain controllers.

If I connect over dial up myself (laptop running XPPro) I have no problems. I've been looking at this most of the day, and am completely lost as to why authentication is failing to our PDC (well, a Win2k3 AD). What happens is that when you do Start->Run->< server name > or map a drive, you are repeatedly asked to log in, as if you username or password were wrong. Looking at the logs though show successful authentication!

It must be some security issue on their PCs - we've been playing with one of them, removing it from their domain etc, but still can't get it to login to these servers. The two PCs I've been looking at today of theirs - one's a win2k pro box and the other a win2k3 enterprise server.

Anyone any ideas?

Cheers,
Steve

[DVDWotcha]

does the PDC run terminal services ? I have a similar problem with some terminal servers at work. Can login to the ts fine but gives the same drive mapping problem you get.

Would like to know why if anyone knows.

[SteveC]

It does actually. I'm just confused as to why it works fine locally over the network, and it works fine for me when I test it, but in India, they just can't get to the PDC. :confused:

[Anthony.S]

What group are the VPN users in, is it 2k3 RRAS?
Sounds like a problem with the default domain controller policy. As you know the security is much tighter on 2k3 so check if remote users are authorised.