PPTP VPN on Server 2008R2 dropping users but acting like it is still connected

Hello,
I'm having a weird problem and I'm at a loss. We have a couple of cloud servers that form our remote office system. Basically, their is 1 DC, 1 Remote Desktop server, and 2 member servers being used as workstations. The users access these
server and resources via a PPTP VPN setup on the DC using RRAS. Everything has worked fairly well for the last year, but recently, my users have complained that they get disconnected at random times over the last couple of weeks. I was able
to observe the behavior yesterday and it goes something like this:
-The user is working fine
-The user tries to access a share, open a web page, tries to open a remote desktop session or notices that their Outlook client is disconnected and finds that nothing can be reached outside of the local machine. I tried pinging the DC address,
www.google.com, and the RDP server without success. From the server, I tried pinging the errant workstation without success. The server shows the connection to be active and the workstation does not disconnect the connection. On
one occasion, the problem just rectified itself and everything started working again. On all other occasions, the VPN had to be disconnected and reconnected. Note that some workstations are not reporting this problem.
-The user disconnects the VPN
-The user reconnects the VPN and usually everything is okay again for awhile, but sometimes they are disconnected within minutes.
This is new behavior, and no changes have been made by me and the Cloud support people tell me they haven't done anything. At this point, I'm not even sure how to go about troubleshooting it. The next time it happened, I was going to pull an ARP table
to see if anything looks amiss, but the only other avenue I have going is a call into the cloud services support to see if they can look for dropped or filtered information between our main office and our cloud server.
The only part of this setup that is a little bit different for me is the IPv4 settings in the RRAS console under properties of the server. Normally in the IPv4 settings, I select DHCP and allow the users to pull from the existing DHCP server. However, the
cloud support recommended against having a DHCP server, so instead of DHCP, I selected "use static IP address pool." I put 10.216.8.197 to 10.216.8.22 and the subnet mask is picking up from the server as 255.255.255.224 and the default gateway is
picking up from the server as 10.216.8.193.
Does anyone have any advice on how to troubleshoot this problem? What to try next if the cloud services support doesn't find anything, etc?
Thanks,
Jeffery Smith

Hi Jeffery,
According to your description, the VPN clients can connect the server at the beginning, but when we reconnected after going wrong, they were disconnected within minutes. Maybe the next time it happened, we could follow steps below to troubleshoot this issue.
Use ipconfig /all command in the VPN client when we set up VPN connection, to view which IP address the VPN client obtain.
Pull an ARP table from the VPN client to view the IP Address-Physical Address mappings as you said will help to troubleshoot this issue. The assigned IP address maybe used by other computers.
If the static IP address pool range from 10.216.8.197 to 10.216.8.22, due to the subnet is 255.255.255.224, there are 8 subnet in the 10.216.8.0/27 network. If the static IP address pool consists of ranges of IP addresses that are for a separate subnet,
then we need to either enable an IP routing protocol on the remote access server computer or add static IP routes consisting of the {IP Address, Mask} of each range to the routers of the intranet. If the routes are not added, then remote access clients can’t
receive traffic from resources on the intranet.
Best Regards,
Tina

Similar Messages

Rysnc not sending files, but acts like it is..

This ones got me really confused.
I'm trying to backup my laptop's most important folders, like /etc/ and /home/, to my arch linux server. I somehow managed to backup my /etc directory, but since then, its not working.
It looks like it worked, sometimes even giving accurate-ish "speed up" reports at the end. But when I SSH into my server, and run "ls -l" in the folder everything was meant to be sent to, theres nothing there.
This is one of the commands I've used, using the "push" method.
rsync --progress -avz /home/ -e 'ssh -p 1984 [email protected]:/backup/laptop2002/home'
From what I know, this is meant to compress my /home contents, preserving permission and whatnot thanks to the -a switch, sending the contents of said /home directory to my password-less, yet ssh-key-secured server on 192.168.1.70, dumping it in the /backup/laptop2002/home directory. But it doesnt. It reports that it has, but doesnt.
This is the other one I tried, running this on the server to "pull" the /home folder from my laptop.
rsync --progress -avz -a 'ssh -p 1984 [email protected]:/home/ /backup/laptop2002/home/'
Still no joy. It's asthough I'm running rsync with the -n switch to simulate the backup. But obviously I'm not.
Im totally baffled. It's really quite frustrating.
Any ideas?
Thanks.

The -e option should only contain "ssh -p1984", not any hostnames/paths.
To synchronize your local folder to the remote server use:
rsync --progress -avz -e 'ssh -p1984' /backup/laptop2002/home/ [email protected]:/home/
To synchronize the remote folder to your local machine use:
rsync --progress -avz -e 'ssh -p1984' [email protected]:/home/ /backup/laptop2002/home/

My itouch is just completley dead its charged but acts like its dead- black screen all the time no response

my iTouch will not power on at all- Its just completley blank as if it is dead but it is not-- I tried restoring it Plugging into my computer- Hard reset nothing works-- My mom has the exact same problem!!

plug ipod in to computer leave for 30mins
now follow these steps and it should work
1.with ipod still pluged in to computer press and hold both the power and home button for a full 30secs
2. if apple logo shows 1st let go of the power button wait 5sec's and let go of the home
3.unplug from computer. if ipod on turn fully off press power button for 5sec and slide to turn off
4.wait 30sec's turn back on and plug back to computer
if that does not help and u have an apple store near you go there, they should help u better

Fn key disconnect? popped off but acts likes its on?

my fn key popped off, the clear bubble is missing. i've been using the computer without a key because i dont use the function key anyway. but finally got around to putting the key back on. it stays depressed becuse the bubble is missing, no biggie, except now the fn is 'on' all the time! when i lift the board and stick my finger underneath its "off" thus i am able to type this-one handed. wierd! help!

Tried it> Go into your system preferences and click on keyboard and see it the Use all F1,F2 etc. as standard function keys is selected if it is then unselect it, if it is not select click the box to select it,
no luck.
Just the 'fn' key on the keyboard does not respond. the rest of the keys seems to be working fine.
How can I check wheather my wireless keyboard is defect or not?
Message was edited by: musti2

System will not boot up but acts like u clicked the recovery

compaq cq5300y turn on screen goes white sometimes will come up lik ujust clicked the recovery button will say configuring windows do not turn off computer gets about 2 20 percent progress then says shutting down lik u clicked on it an turns off

Не открывается дисковод у ноутбука hp, как открыть? Ноут не загружается -выдает ошибку, как открыть дисковод, помогите, пожалуйста.

Audio service hangs on Windows Server 2008R2 with Remote Desktop Services

Hello!
I have some terminal servers on Windows Server 2008R2. Users have the ability to use web browsers (IE, Firefox) with the included Flash Player, IM clients / Internet
telephony (Skype, ICQ), Windows Media Player, Office, and a specific internal software (works with MS SQL). I have the following problem: the Windows audio service hangs up that leads to hangup of all programs which use it, such as: any sites in Internet with
a flash content (in all browsers), ICQ, Skype.Even logging out the session hung when tried to lose a sound. It's impossible to stop or restart service from the services.msc the service just hang with status "restarting". To stop service I terminate svchost
process. As soon as the audio service is stopped - all programs start to work correctly (certainly without a sound). This problem appeared not suddenly - periodic hangups of programs on servers were marked long ago (more than half a year), but not directly
were connected to audio service, especially there were they rather rare (on the average once a week - two) and were corrected by server reset. The error message:
Error container , type 0
Event name: AppHangXProcB1
Reply: No data
Ident CAB: 0
Problem signature:
P1: iexplore.exe
P2: 9.0.8112.16446
P3: 4fb57c8f
P4: 77c1
P5: 131200
P6: svchost.exe:AudioClientRpc
P7: 0.0.0.0
P8:
P9:
P10:
shall suggest an idea about a sound service, but in Event Viewer has no Windows Audio events.
Recently I updated Skype to the last version 6.0.66.120. Before was 4.2.35.155 because versions 5хх on Windows2008R2 with the Remote Desctop Services actually don't
work, if users at the server more than one or two. We checked the sixth version by the test machine with the terminal environment and very were delighted to its normal working capacity. However after installation of this client on production servers it appeared
that hangups of programs on servers began to occur on the average time at an o'clock in case of an average daily load (about 20 users on one server). If you have worked one or two users, problems weren't watched. Internet search led me to the support page
Skype, where the Windows 7 x64 user faced a similar problem in the fifth version of the program. But the solutions proposed by the support team does not help me. In addition, I found the advice to disable enhancements in the properties of the playback device,
but it is impossible for the "Remote Audio" device.
At the moment, on servers where I updated the Skype, I disabled the audio service. If within a reasonable time, I do not find a solution, I will have to revert
to an older version of Skype, but I would like to solve the problem completely.

Enable the Allow audio and video playback redirection Group Policy setting
To allow audio and video playback when connecting to a computer running Windows Server 2008 R2, you must enable the Allow audio and video playback redirection Group Policy setting. The Allow audio and video playback redirection Group Policy setting is located
in Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection and can be configured by using either Local Group Policy Editor or the Group Policy Management
Console (GPMC).
For more information about Group Policy settings for Remote Desktop Services, see the Remote Desktop Services Technical Reference (http://go.microsoft.com/fwlink/?LinkId=138134).
Is this policy applied? Refer:
http://technet.microsoft.com/en-us/library/dd759165.aspx
Also, have you tried update the audio device driver for this terminal server?

PPTP VPN is broken on Yosemite

Does anyone have a fix for PPTP VPN. Works great on another Mac running Mavericks right next to the Mac running Yosemite.
Created a PPTP VPN network setting same as the Mavericks computer, connecting to the same server at work (running Watchguard PPTP) and it never connects.

Hi BW,
I do use DHCP on the client and I did try "Send all traffic...", it still never connects... I thought it was an issue with the password/handshake between Yosemite and the Watchguard (remote VPN server) firewall PPTP protocol... But now I see that a previously working (in Mavericks) PPTP VPN between my office computer and my home computer now refuses to connect. There is also a bug in the Yosemite (Show VPN in Apple Menu Bar) when you first try click connect to your selected VPN, it automatically thinks you're connected (but it doesn't do anything) so you need to disconnect then reconnect for anything to actually happen... Unfortunately, it still does not acknowledge the VPN, just says "A connection could not be established...". I going to try and packet sniff to find a solution and also try to use an L2TP, maybe that will work.

Pptp VPN route : Leopard does not set correct netmask

Hello
Today I switched from a MacOSX 10.4.11 (Tiger) PowerBook to a MacOS 10.5.5 (Leopard) MacBook Pro. I configured my pptp VPN settings with the "Internet Connection Tool" and Network-Settings-panel on Leopard identically as on my Tiger PowerBook (option route all traffic over VPN on both systems disabled).
As far I could connect on the Leopard system to the destination VPN server without any problem, but could only establish a traffic-connection to the VPN server it self. As on my Tiger system the VPN connection worked seamless over several years now I supposed some routing problem.
In fact on the Tiger system the routing table showed me, that the destination network has a 255.255.0.0 network mask and was correctly received and set on the Tiger routing table, but that the Leopard systems assumes a 255.255.255.0 network mask and set this assumption to the its routing table: (destination LAN has address space 10.50.0.0 - 10.50.255.255 / netmask 255.255.0.0)
Tiger 10.4.11 :
10.50/16 ppp0 USc 0 0 ppp0
Leopard 10.5.5 :
10.50/24 ppp0 USc 0 0 ppp0
In the Leopard vpn setting panel, there is also the possibility to set manually the destination ip-address and netmask, but I found it has no effect on the real setting on Leopard. The only way to set the correct route with the correct netmask is under Leopard to do it by the command shell - first deleting the route set by Leopard and setting a new route with a the correct netmask :
route delete -net 10.50. -interface ppp0
route add -net 10.50. -interface ppp0 -netmask 255.255.0.0
I do not understand, why under Tiger (and also on MacOSX 10.3.X) the pptp VPN worked always correct and set the correct netmask, and now Leopard (MacOSX 10.5.X) does some kind of assumption and is not able to set the correct netmask.
Any Ideas ?

How did you determine that partial traffic is sent through the VPN?
Basic principles of VPN is to avoid using a common subnet for your client ip pool. Having an uncommon subnet will solve your #2 issue below. Simply change the 3rd octet on your home network from .1 to something else, .11
I have a working pptp server configuration on ubuntu 10 with iphone 3g iOS 4.1 connected, invested hours of research, but only a short time configuring the server and iphone vpn client. passing internet traffic through local gateway/router from work wi-fi and accessing local desktop using windows remote desktop lite app.

Start SQL Server in single user mode with parameter -m doesn't work well

C:\Windows\system32>net start mssqlserver /m "Microsoft SQL Server Management St
udio - Query"
The SQL Server (MSSQLSERVER) service is starting.
The SQL Server (MSSQLSERVER) service was started successfully.
C:\Windows\system32>sqlcmd -S . -e
1> go
1> select @@servername;
2> go
select @@servername;
myserver
(1 rows affected)
1>
As you can see, I'm still able to connect with sqlcmd prompt to SQL Server. According production doc of SQL Server 2014, it should not be conncting by sqlcmd. it shall only be connected by SSMS.
below the original doc on msdn:
Start SQL Server in Single-User Mode
Provide Feedback
Under certain circumstances, you may have to start an instance of SQL Server
in single-user mode by using the startup option -m. For
example, you may want to change server configuration options or recover a
damaged master database or other system database. Both actions require starting
an instance of SQL Server in single-user mode.
Starting SQL Server in single-user mode enables any member of the computer's
local Administrators group to connect to the instance of SQL Server as a member
of the sysadmin fixed server role. For more information, see Connect to
SQL Server When System Administrators Are Locked
Out.
When you start an instance of SQL Server in single-user mode, note the
following:
Only one user can connect to the server.
The CHECKPOINT process is not executed. By default, it is executed
automatically at startup.
Note
Stop the SQL Server Agent service before connecting to an instance of SQL
Server in single-user mode; otherwise, the SQL Server Agent service uses the
connection, thereby blocking it.
When you start an instance of SQL Server in single-user mode, SQL Server
Management Studio can connect to SQL Server. Object Explorer in Management
Studio might fail because it requires more than one connection for some
operations. To manage SQL Server in single-user mode, execute Transact-SQL
statements by connecting only through the Query Editor in Management Studio, or
use the
sqlcmd utility.
When you use the -m option with sqlcmd or
Management Studio, you can limit the connections to a specified client
application. For example, -m"sqlcmd" limits connections to a
single connection and that connection must identify itself as the
sqlcmd client program. Use this option when you are starting
SQL Server in single-user mode and an unknown client application is taking the
only available connection. To connect through the Query Editor in Management
Studio, use -m"Microsoft SQL Server Management Studio - Query".
Shawn

Hi Shawn Xiao,
For starting SQL Server instance in single user mode, we can add –m; parameter in SQL Server Configuration Manager, also we can run CMD with ‘Run as administrator’ and input the following statement.
NET START MSSQLSERVER /m
I do a test in SQL Server 2014 Express version, after starting SQL with Single User Mode, SQL Server will only accept one connection. If you connect to SQL Server with a user account, the following error will occur.
Login failed for user ‘domain\username’. Reason: Server is in single user mode. Only one administrator can connect at this time.
However, in your situation, you can connect to SQL Server and run T-SQL statement successfully, it can be due to connection with the administrator account in your sqlcmd.
For more information, you can review the following article.
http://zarez.net/?p=117
Regards,
Sofiya Li
Sofiya Li
TechNet Community Support

Server 2008R2 mapping to shared folders fails users of Windows 8.1 but seems OK on Windos 8.0 and no problems for Windows 7

Having read what I could from the related questions, the answers still elude me. This issue apparently is specific to Windows 8.1.
First, a little background.
1: The server is not on a domain, The system runs Server 2008-R2 standard with all folders shared across a standard "Workgroup" type network. They would prefer to
leave this layout intact.
2: The shared folders are nothing but Data files. There are no active system folders or anything used in an "active" environment. They are mostly Word doc, excel
files, pdf, txt, etc. However, due to the requirements of the software that needs to access these files, they Must
reside on a mapped network drive letter. Nothing else works due to the way the SQL database program stores the reference points back to the data.
I have had some success using what amounts to a “simulated” mapping using WebDAV to access the server. But access speed is a lot slower ad file size is limited.
3: The system has been configured as-is for the past 3 years with Users all on Windows 7 x64 (mixed OS, some Home Premium, some Professional) and the only problems that come up are when
access is through an ISP that blocks port 445. This was the original reason for finding a WebDAV/Cloud method just for those Users since they were unable to Map drives to anything on the Office Servers from their Home Internet even when using a VPN.
When Windows 8.0 became the only version available, I added a few users whose new laptops came with 8.0 from the vendors. While there were a very few minor problems, for all practical
purposes, I was still able to provide access to the mapped folders.
As the Windows 8.1 roll-out progressed, some users were successfully upgraded while others are still stuck in Windows 8.0. The issues with this seem to be hardware related and vary
depending on the Make and model of the laptop. I have been assured that eventually all of these will be able to advance to 8.1. But this delay has given me an excellent mixed OS environment for testing.
On the users who have not yet purchased new equipment and who are still using Windows 7. There has been no change. Their drive mapping is stable and they can always connect as usual.
Those blocked from lack of port 445 or still blocked. Systems inside the Office and those with ISP's who allow port 445 can use all mapped drives as normal.
Users who had Windows 8.0 and who have not yet been able to upgrade to 8.1 also have been unaffected. Same results as Windows 7.
Users who got the Windows 8.1 upgrade as well as those that came factory loaded with Windows 8.1 seem to be a never-ending list of problems. The ones that came native with 8.1 are worst
of all. The list of error codes runs through everything that has to do with “communication with the server”. As far as I have seen, this appears to be the issue.
Whether they are in the office on a wired network connection or at home on a Wi-Fi connection, the issues have the same results but the actual error codes may vary slightly. All of
them refer back to an inability to communicate with the server.
Nothing on the server has changed in any way. Users with Windows 7 continue to have zero problems, Users with Windows 8.0 seem to be doing fine as well. Only those with Windows
8.1 are affected and their problems are dramatic with everything from a total loss of drive mapping to misdirected data when the maps are active.
I have tried to make the drives automatically remap on reboot. I have tried registry modifications. I have done everything I can think of to make a difference but the results are the same
for every system using 8.1. The mapped drive letters invariably disappear. Sometimes while the system is in use ( I think I have been able to trace this to times when the system enters Sleep or Hibernate) but always when the system reboots.
One detail that might point to somewhere is that the "time to connect" when mapping the drive is so long that I believe some of the original failures were due to not waiting for a
minimum of 3 or 4 minutes to give time for the Shares to show-up in order to map them. Once the mapping is successful, the file access speed seems normal. But invariably, the drive becomes "unmapped" repeatedly each day.
I know this was a long question but I have tried to provide every possible detail for anyone who has experienced events like this who may already have a solution. I would even be glad
to purchase a 3rd party application if that is what it takes to get this to work. My next planned effort is to try using Server 2013 but I am afraid that might open another can of worms for those who still use Windows 7.
I have also been told that this is in some way related to the push to "Cloud" support in Windows 8.1 OS but I do not see where this would come in. I can say that this was the
one place where things continued to work as before. People who had Windows 8.1 and who had to use the CLOUD copies of our data are still able to connect to it with no problems.
Any suggestions appreciated. Preferably those that would not need extensive changes to the basic network structure. This "workgroup" consists of less than 25 users and any
extreme measures would be hard to justify

Hi，
I sugget you try to ping server so that we can verify the connectivity.
Can windows 8.1 access Windows Server 2008R2?
Also,please check the event viewer to see if some error log appeared when the issue occurred.
Regards,
Kelvin Xu
TechNet Community Support

IVPN starts, but "the pptp-vpn server did not respond. Try reconnecting."

Hi. I am new to VPN, and I just got the software iVPN from Macserve, and the server starts successfully, using either PPTP or L2TP:
But the connections from my network do not connect. Every time I click on "connect" for either network connection, I get the error "the pptp-vpn server did not respond. Try reconnecting."
I set up both connections in my Network Preferences according to the support page (http://macserve.org.uk/support/ivpn/):
My Airport Express configurations have never given me any problems with my home network:
And I think that I forwarded the ports properly (even though my firewall is not activated):
What am I doing wrong?

The Apple routers can be a problem on vpn passthrough.
Ports that are required for vpn are more complicated ..
See earlier post.. eg How do I set up L2TP VPN?
Ports for PPTP which you have opened manually.. are not valid for L2TP.. so you need several more ports opened.
The problematic ones are GRE and ESP which are protocols not ports.
I think you can pretty well assume the apple router running anything that has BTMM in it won't work.. since it will need the port 500 for itself.
On the old express try going back to 7.6.1 firmware.. I have to say I don't use the express.. lots of extreme and TC.. so their firmware issues are slightly different so firmware versions for the express are somewhat different.
Try not to use both port forwards (mapping if you must).. and DMZ.. they can fight each other.. if DMZ doesn't work it is better to turn it right off and forward all the required ports.
Let me recommend a test.
Plug your cable modem directly into the computer running the VPN.. so you have no NAT router in front of it.
Pay attention to the local firewall that apple runs and what ports you will need to open on it to get vpn to work.. this is your best chance to get remote vpn running. If you fail with the public IP on the computer it will certainly fail through NAT.. and generally local firewall will be an issue.
You should of course test that a client in the local lan can connect by the vpn.. it is always worth testing from the easiest configuration to the most complex.
So local lan just as you have now..
Then direct cable connection to the computer.
Then NAT router.. but you can pretty well assume apple routers are going to be problematic because apple want to dally at BTMM using same ports as IPSEC uses for L2TP.
My email is live.. roll your mouse over it and talk to me direct..

Leopard Server PPTP VPN and Airport, can connect VPN but not AFP/SMB/VNC

I have on several occasions enabled a PPTP VPN service on Leopard Server and forwarded the appropriate ports in my Airport Extreme with this result: Outside clients can connect to the Leopard Server, but trying to connect to the server with AFP, SMB, Screen sharing or Remote Desktop over this VPN just times out.
The VPN seems to be working OK, but after establishing the VPN I can't use it. The client (iMac with Mac OS X 10.5.3) gets an IP, DNS, Router etc. from the network's DHCP.
I have tried setting the server as default host with no effect.
Everything is running the latest available updates.
Is there any bug/problem with PPTP VPN passthrough an Airport Extreme on the Server side? Is there anything that needs to be configured other than forwarding port 1723 on the Airport?

I had a similar problem. Hope my solution can help you.
Check if the routers on both sides of the VPN connection use the same ip address style (ie. 10.0.0.x, 192.168.1.x). If they both use the same style then they conflict.
I have a Airport Extreme at home and was VPNing to a server behind a time capsule. Both were using the 10.0.0.x style IP. I switched my home IP style to 192.168.1.x and everything worked right away.

Has anyone got PPTP VPN to work on Lion Server?

Has anyone got PPTP VPN to work on Lion Server?
I had a go with the terminal commnds posted by apple support but no joy. Since then Apple has pulled the suport article - is it because it didn't work?
I get PPTP is less secure but PPTP seems to be more reliable don't know whey they can't keep as GUI. I've got them both running on our 10.4 server and L2TP stoped allowing connections for no reason PPTP was still working L2TP started working again on its own. Plus L2TP drops my connection when I connect with a 2nd device e.g connected with my Macbook connect with my iPhone (different username) it drops my Macbook.
Any advice getting PPTP to work on Lion Server would be appreciated
Thanks
Ben

Hi,
I have posted a bugreport on this issue to Apple. Currently (10.7.2) it is not possible to run PPTP on any Mac OS X Server when using a 10.7 Server as Directory Server.
I have tried 'everything', but the MPPE encryption mechanism seems to be broken.
Edit: I see now that the bugreport is filed as a duplicate to an older case, which is now closed. I hope this means they have found the problem and will release a fix in the next update.

Can't connect to PPTP-VPN server...

When attempting to connect to a DD-WRT PPTP VPN server I kept receiving the general "Can't connect to PPTP-VPN server." message. All of the settings were exactly correct and tested on a Windows laptop. I began writing this because I didn't have any other ideas but half way through it (out of the blue) decided to attempt connecting. It worked!
The only thing I did different was delete the /Library/Preferences/SystemConfiguration contents and reboot.
Let's hope it continues to work. Posting this in case anyone else has the same error as I.

A follow up on the VPN issue: it would only work if my laptop's wireless was tethered off of my Android phone - any other connection would connect to the VPN and get an IP but I couldn't ping anything. Also, after rebooting, I get the exact same damning error message now and any combination of rebooting and removing/renaming (don't ever delete system files!) /Library/Preferences/SystemConfiguration/* hasn't fixed the issue.
I very much hope Apple releases an update soon for this - it's a serious inconvenience! It must be a network stack issue too because I've tried many 3rd party applications that barf as well.

Windows 7 PC locking out domain user in Windows Server 2008r2 domain

I have reviewed dozens of related questions, but none have given me an answer that works on this situation.
We replaced an XP desktop with a Windows 7 desktop. It keeps locking out just user(of over 25 migrated). I have disabled the Windows 7 credentials, made sure the patches were in place, there are no other devices-wireless or otherwise.
The users pc has a kvm attached for another system, we have a Windows 2008r2 server. The user does not save any passwords, I have make changes recommended in the registry. They do have a couple mapped drives. Logs show that it is the users
pc that is causing the lockout, but much of the users time they are on the other system. We have 4 other users that have the exact same setup but are not having any issues. It happens several times a day and I must unlock their password on the
ad. Sometimes if we wait 45 min or so it will unlock itself. Strange considering settings lockout user after 5 bad passwords and lock them out for 120 minutes.
I have tried virtually everything I have read relating to this issue in Win7, 2008r2.
User is getting frustrated and so am I!.
Thank you.
Rebecca Palmer

Try using this tool (free for limited period) and check if you can trace from where the account is getting locked :
http://www.netwrix.com/account_lockout_examiner.html
http://www.sophos.com/en-us/products/free-tools/conficker-removal-tool.aspx
Arnav Sharma | http://arnavsharma.net/ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
the thread.

PPTP VPN on Server 2008R2 dropping users but acting like it is still connected

Similar Messages

Maybe you are looking for