Welcome to ISAserver.org

Win XP clients receive "error 691" when attempting to connect as a non-administrator

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> Win XP clients receive "error 691" when attempting to connect as a non-administrator

Page: [1]

Message

<< Older Topic Newer Topic >>

Win XP clients receive "error 691" when attem... - 12.Sep.2005 7:45:00 PM

itsasecret1983

Posts: 18
Joined: 24.Nov.2004
Status: offline

I've got a VPN set up and experience no problems when connecting as one of the domain administrators, but while trying to connect as a non-admin user, i get "Error 691: Access was denied because the username and/or password was invalid on the domain".

I know that the UN / PW is correct. I've checked with several different users. In Active Directory, i've tried with Dial-In permissions both set to "Allow access" and "Control access through ...".

The fishy thing I've found so far is that on my ISA VPN configuration, under "Specify Windows User" I've got "Windows / Domain Admins / mydomain", but for the other groups I've added (I created a special "VPN" group and added them, and have tried re-adding them because of this problem) I get "Windows / S-1-5-21-4880-... / (nothing for domain)". This is strange and I don't know how to resolve it. It's like ISA can't contact Active Directory to figure out what the name of this group is. It's just got a really long string of numbers. Any help in how to resolve this? I really believe this is the root of my problem. Any ideas anyone? I've tried adding different groups, both built-in ones and ones that i've added, but to no avail. I'm really stuck here. Any clues?

Post #: 1

Featured Links*

RE: Win XP clients receive "error 691" when a... - 13.Sep.2005 11:47:00 AM

itsasecret1983

Posts: 18
Joined: 24.Nov.2004
Status: offline

Oops, looks like my problem was that someone (we wouldn't want to name names here) forgot to install the ISA 2004 Standard Edition SP1. That fixed me right up in a hurry though.

Anyways, I just wanted to give a shout-out to all those who administer/participate on this site. I've found it to be a great resource, and appreciate all the time/effort that goes into this community. Thanks again.

(in reply to itsasecret1983)

Post #: 2