Users connecting to VPN get bad username/password error.

[Cat1]

Hi,

I've set up a Windows 2000 server as a VPN server. ISA server is also installed. Using PPTP. DHCP Relay using internal DHCP/DNS.
For the first month it was working fine, then from nowhere started giving the following error to all users attempting to connect:

Error 691: Unknown Username and/or password.

The following errors also appear in the event log:
----------------------------------------------------------
Event ID: 20189
The user connected from x.x.x.x but failed an authentication attempt due to the following reason: There was an authentication failure because of an unknown username or a bad password.

Event ID: 20014
The user domain\user has connected but failed to authenticate on port VPNx-x. The line has been disconnected.
-----------------------------------------------------------

DEFINITELY using the right password - have experimented & found that if the user is added on the DC to the domain administrators group (doesn't work if add to local administrators group) they can connect.

WHAT I WANT TO KNOW IS... How can i get round giving anyone domain admin priviledges? What is it that the RRAS server is trying to access that a normal user can't do????? And why has it only just started happening when the server hasn't been touched??!

Thanks in advance!

 

[nam1974]

Same problem here, I have checked DNS, AD etc.. all seem fine, just the users can't log-in.

has anyone had any luck with this ?