MAS RAS Error 691: Access denied b/c name/pswd invalid on domain

[Irish1Pat]

1 MAS w/ MSS R2

Dialing into MAS using dialup network connection from PC yields the error in subject line.

Used 2 other logins - same result.

Had customer share their PC desktop to access MAS to reset the services account pswd. Verified services account is a member of domain administrator group, along with the 2 other logins used. All 3 logins are enabled for Dialup in AD.

I use the same dialup connection to other MAS servers & all is OK.

Any thoughts or ideas or fixes appreciated.

 

[KenMeans]

Below are the step that i have used from the install guide it sounds like some step is missing. Has it ever worked ?

Setting up remote access
Use this procedure to set up the MAS to take incoming service calls.
To set up this MAS for remote access:
1. Activate remote access service as follows:
a. Double-click the Monitor icon on the desktop.
b. In the Monitor window, click Services (Local) in the left pane.
c. In the right pane, scroll down to Routing and Remote Access.
Double-click it to open the properties window.
d. In the Routing and Remote Access Properties window:
(1) On the General tab, set the Startup type to Automatic.
(2) Click Apply.
(3) Under Service status, click Start.
(4) Wait for service to start, and then click OK to close this window.
e. Close the Monitor window.
2. Double-click the Configure icon on the desktop.
3. To set up remote access properties for this MAS:
a. Expand Routing and Remote Access.
b. Expand the server name (such as MYMAS1).
4. Verify that remote access service (RAS) is running as follows:
a. If the server icon shows a green upward-pointing arrow, RAS is running.
Continue with Step 5.
b. If the server icon shows a red symbol, activate RAS as follows:
(1) Right-click the server name, and select All Tasks > Start.
(2) When prompted to re-enable Routing and Remote Access, click
Yes.

5. Set up inbound remote access to the modem as follows:
a. Right-click Ports and select Properties.
b. In the Ports Properties window, verify that the modem is highlighted, and
then click Configure.
c. In the Configure Device - <model> Modem window, verify that the checkbox
is selected to activate Remote access connections (inbound only).
d. Click OK.
e. Click OK to close the Ports Properties window.
6. Verify the modem setup:
a. Click Ports in the left pane.
b. In the right pane, verify that there is an entry for the modem attached to this
MAS, such as MultiTech ZBA-USB-V92.
! If the modem entry is present, go to Step 7 on page 4-31.
! If the modem entry is missing, continue as follows:
(1) Verify that the modem is plugged into the recommended USB port
on the MAS. See "Connecting the USB modem on the MAS" on
page 2-39 for details and an illustration.
(2) Click Start > Settings > Control Panel.
(3) Double-click Phone And Modem Options.
(4) The first time you select Phone and Modem Options, a wizard
runs.
! Complete the wizard by following the steps on each screen to
configure the locale settings.
! When finished, a new entry is displayed in the Locations box on the
Dialing Rules tab.
(5) In the Phone And Modem Options window, click the Modems tab.
(6) Verify that the modem is present and attached to a port. This is
typically COM3 for the recommended USB port on the MAS.
(7) If the modem is not present or attached to a port, you might need
to remove the modem entry, and then reinstall the modem.
(8) When finished, click OK to close the Phone And Modem Options
window.
(9)Close the Control Panel.
(10) Return to Step 6-a and verify that the modem is now present

7. Set up a static IP address pool as follows:
a. In the left pane, right-click the server name (such as MYMAS1) and select
Properties.
b. In the local Properties window for the server, click the IP tab.
c. Under IP address assignment, select Static address pool.
d. If the window shows an IP address range of 0000 to 0000, select the
displayed range and click Edit. (If no address range is already entered,
click Add.)
e. In the Address Range window, enter the start and end IP addresses for the
MAS that you are installing.
! If Avaya is supporting this MAS, use the IP addresses that were
generated by the Automatic Registration Tool (ART).
! If IP addresses are not supplied, you can use the following:
MAS#1: 192.168.2.200 to 192.168.2.201
MAS#2: 192.168.2.202 to 192.168.2.203
MAS#3: 192.168.2.204 to 192.168.2.205
MAS#4: 192.168.2.206 to 192.168.2.207
MAS#5: 192.168.2.208 to 192.168.2.209
MAS#6: 192.168.2.210 to 192.168.2.211 (Tracing Server only)
f. Verify that the number of addresses is 2.
g. Click OK.
h. For the Adapter field, select Allow RAS to select adapter.
i. Click OK to close the properties window.
8. For a subsequent MAS, close the Configure window.
9. Proceed with remote access administration as follows:
! For MAS#1, continue with "Administering the first MAS for remote
access" on page 4-32.
! For a subsequent MAS, continue with "Adding a subsequent MAS
to the remote access group" on page 4-33.
Note: These IP addresses use a 2 (not a 1) in the third number place.
Administering the first MAS for remote access
Continue the previous procedure on MAS#1 as follows:
1. In the left pane of the Configure window:
a. Expand Active Directory Users and Computers.
b. Expand the directory for the Windows domain (such as privdom.com).
c. Click Users.
2. In the right pane of the Configure window, double-click RAS and IAS
Servers to open the properties window.
3. In the RAS and IAS Servers Properties window:
a. Click the Members tab.
b. Click Add.
c. In the Select Users, Contacts, Computers or Groups window, double-click
the entry for this MAS (such as MYMAS1). It has a blue terminal icon
beside it.
d. Verify that the correct computer name is shown underlined in the list box.
e. Click OK to close this window.
f. Click OK to close the RAS and IAS Servers Properties window.
4. In the right pane, double-click the account used for technical support
(such as Services Account or Support Account). In the properties
window for the remote access account:
a. Click the Dial-in tab.
b. Under Remote Access Permission (Dial-in or VPN), click the option buttonto select Allow access.
c. CallBack Options should remain at No Callback.
d. Click OK.
5. Close the Configure window.

Ken Means

http://www.tel-is.com

"I find that the harder I work, the more luck I seem to have."
- Thomas Jefferson (1743-1826)