Hondaswap.com | Honda Technical & JDM styling Forums

dohcvtec_accord · 02-04-2005, 11:23 AM

Hardware: Watchguard SOHO 6 firewall w/ VPN capability
Software: Server 2003 (Small Business Server 2003)

So, prior to our upgrading to SBS, we used to be on an XP file/print server, and everyone was on a workgroup. We had VPN capability through our firewall, and everything was running quite smoothly.

Enter SBS 2003. The whole upgrade went rather well, but now we face an issue with particular users trying to use the firewall VPN. These users are the ones who have laptops that double as their workstation while at the office.

Scenario: User undocks laptop and takes it home. Plugs into the intraweb and logs onto the computer using the same Domain User as at the office. Connects to the VPN and attempts to log in using the same user name and password as what logged him onto the computer/domain. XP burps up an error that says the user name is already in use on the domain and can't authenticate. User gets around this by logging on to the VPN as a different in-office user who is not currently logged in.

So......What to do? I know that we could utilize Server 2003's VPN capability, but it seems complicated to learn, and kind of silly since the firewall VPN is so close to working correctly (also, we like just being able to open an Explorer window to drag/drop files, rather than having a "remote desktop"). We could also set up alternate "remote users" in Server 2003, but we've only got 10 licenses, and are utilizing 9 of them already.

Thanks to anyone who read through this whole post, and more thanks to anyone who can offer a solution.

pissedoffsol · 02-04-2005, 11:43 AM

are you on a domain or still in a workgroup?

dohcvtec_accord · 02-04-2005, 12:22 PM

Domain.

Also, I've tried giving the "Mobile User" permission to the user, with no luck.

Calesta · 02-04-2005, 12:29 PM

I've never tried VPN setup on 2003.

dohcvtec_accord · 02-04-2005, 12:30 PM

Damn you Mike. Damn you.

:P

Calesta · 02-04-2005, 12:33 PM

Sorry man, Mike no worky in IT anymore. :P

lswhitecivic · 02-04-2005, 02:40 PM

It seems to me that it might be some kind of server configuration error or a domain controller problem. Because i don't see why it would say something about the user name. I can be logged on to several machines simultaneously on my network at work. Also if im logged on at work and take a laptop and don't connect it to the network but try and connect to the vpn that also works. I personally have never seen a problem like that since we have had server 2003. Just another place to look for problems. Sorry I can't be more help.

Ben

lswhitecivic · 02-04-2005, 02:44 PM

Aren't you in Colorado dohcvtec_accord?

dohcvtec_accord · 02-07-2005, 12:39 PM

Yeah, I'm in Colorado.

The problem is, I'm an architect with a dangerously limited knowledge of networking. I can only troubleshoot so much, or else I start breaking things.

lswhitecivic · 02-07-2005, 01:24 PM

Is it possible to get a screenshot of the error message that is coming up?

dohcvtec_accord · 02-07-2005, 01:40 PM

Quote:

Originally posted by lswhitecivic@Feb 7 2005, 11:24 AM
Is it possible to get a screenshot of the error message that is coming up?

Quoted post

I'll ask my coworker to get a screenshot.

02-04-2005, 11:23 AM	#1
dohcvtec_accord WRX Sellout Join Date: Sep 2002 Location: The left lane Age: 32 Posts: 8,498 iTrader: 0 / 0% Ride: 2002 WRB Impreza WRX Rep Power: 99	Hardware: Watchguard SOHO 6 firewall w/ VPN capability Software: Server 2003 (Small Business Server 2003) So, prior to our upgrading to SBS, we used to be on an XP file/print server, and everyone was on a workgroup. We had VPN capability through our firewall, and everything was running quite smoothly. Enter SBS 2003. The whole upgrade went rather well, but now we face an issue with particular users trying to use the firewall VPN. These users are the ones who have laptops that double as their workstation while at the office. Scenario: User undocks laptop and takes it home. Plugs into the intraweb and logs onto the computer using the same Domain User as at the office. Connects to the VPN and attempts to log in using the same user name and password as what logged him onto the computer/domain. XP burps up an error that says the user name is already in use on the domain and can't authenticate. User gets around this by logging on to the VPN as a different in-office user who is not currently logged in. So......What to do? I know that we could utilize Server 2003's VPN capability, but it seems complicated to learn, and kind of silly since the firewall VPN is so close to working correctly (also, we like just being able to open an Explorer window to drag/drop files, rather than having a "remote desktop"). We could also set up alternate "remote users" in Server 2003, but we've only got 10 licenses, and are utilizing 9 of them already. Thanks to anyone who read through this whole post, and more thanks to anyone who can offer a solution. __________________ This space left intentionally blank.

02-04-2005, 12:22 PM	#3
dohcvtec_accord WRX Sellout Join Date: Sep 2002 Location: The left lane Age: 32 Posts: 8,498 iTrader: 0 / 0% Ride: 2002 WRB Impreza WRX Rep Power: 99	Domain. Also, I've tried giving the "Mobile User" permission to the user, with no luck. __________________ This space left intentionally blank.

02-04-2005, 12:29 PM	#4
Calesta Admin with a big stick Join Date: Sep 2002 Location: Dallas / Fort Worth, TX Age: 32 Posts: 24,525 iTrader: 0 / 0% Ride: 2003 S2000 Rep Power: 291	I've never tried VPN setup on 2003. __________________ DO NOT PM me with tech questions! Use the forums! Intercrew Auto Salon - (972) 485-8688

02-04-2005, 12:30 PM	#5
dohcvtec_accord WRX Sellout Join Date: Sep 2002 Location: The left lane Age: 32 Posts: 8,498 iTrader: 0 / 0% Ride: 2002 WRB Impreza WRX Rep Power: 99	Damn you Mike. Damn you. :P __________________ This space left intentionally blank.

02-04-2005, 12:33 PM	#6
Calesta Admin with a big stick Join Date: Sep 2002 Location: Dallas / Fort Worth, TX Age: 32 Posts: 24,525 iTrader: 0 / 0% Ride: 2003 S2000 Rep Power: 291	Sorry man, Mike no worky in IT anymore. :P __________________ DO NOT PM me with tech questions! Use the forums! Intercrew Auto Salon - (972) 485-8688


Welcome, Guest! Please Register or Login: User Name Password Members have access to more features, better search, and see fewer ads! It's free, what are you waiting for?

02-04-2005, 11:43 AM	#2
pissedoffsol RETIRED Join Date: Sep 2002 Location: Retirement Home Age: 29 Posts: 49,951 iTrader: 2 / 100% Ride: Electric Scooter Blog Entries: 1 Rep Power: 531	are you on a domain or still in a workgroup?

02-04-2005, 02:40 PM	#7
lswhitecivic Senior Member Join Date: Aug 2003 Location: Downtown Denver, CO Age: 25 Posts: 499 iTrader: 0 / 0% Rep Power: 35	It seems to me that it might be some kind of server configuration error or a domain controller problem. Because i don't see why it would say something about the user name. I can be logged on to several machines simultaneously on my network at work. Also if im logged on at work and take a laptop and don't connect it to the network but try and connect to the vpn that also works. I personally have never seen a problem like that since we have had server 2003. Just another place to look for problems. Sorry I can't be more help. Ben __________________ Whatup Bishes!!

02-04-2005, 02:44 PM	#8
lswhitecivic Senior Member Join Date: Aug 2003 Location: Downtown Denver, CO Age: 25 Posts: 499 iTrader: 0 / 0% Rep Power: 35	Aren't you in Colorado dohcvtec_accord? __________________ Whatup Bishes!!

02-07-2005, 12:39 PM	#9
dohcvtec_accord WRX Sellout Join Date: Sep 2002 Location: The left lane Age: 32 Posts: 8,498 iTrader: 0 / 0% Ride: 2002 WRB Impreza WRX Rep Power: 99	Yeah, I'm in Colorado. The problem is, I'm an architect with a dangerously limited knowledge of networking. I can only troubleshoot so much, or else I start breaking things. __________________ This space left intentionally blank.

02-07-2005, 01:24 PM	#10
lswhitecivic Senior Member Join Date: Aug 2003 Location: Downtown Denver, CO Age: 25 Posts: 499 iTrader: 0 / 0% Rep Power: 35	Is it possible to get a screenshot of the error message that is coming up? __________________ Whatup Bishes!!

Hondaswap.com | Honda Technical & JDM styling Forums

Microsoft Server 2003 and a firewall VPN