VPN User Configuration

[mrforgetful]

I've just enabled Routing and Remote Access on one of our servers, managed and to let a laptop not on the domain connect using my account.

I don't get any mapped drives or anything, when I login to the network I get H:\ mapped through AD and P:\ mapped through a script.

The whole point of setting this up is to enabled remote access to the files in those mapped drives.

Do I need to configure any more settings to make these map over the VPN?

[Domino]

a VPN normally wouldn't map drives - certainly not in any configs I've used.

although it might be possible.

Maybe a batch file to run after connection?

You won't get any thing like logon scripts/domain mappings running as normal, as its not a full "machine logging onto the domain/trusted" relationship

[mrforgetful]

I don't know at the moment I'm at work and need to try from home really.

The thing is from here it just seems to connect and give me a little icon in the tray...

Will it make it so if say typing "net use P: \\Public" worked here it would then work at home as if the computer were here?

[SYNACK]

Will it make it so if say typing "net use P: \\Public" worked here it would then work at home as if the computer were here?

As long as you have the DNS settings right this should work, there is just no mechanisum to trigger scripts unless you ues the "Connect using dial up connection" option at the logon screen which will do a full logon over the VPN.

There are two practical options, one is to simply have a script that is run by the user after they have connected.

The other is to use the Connection Manager Admin Kit (CMAK) application (windows feature avalible in server 2003) to package up a VPN dialer for your users. This is a simple exe that will setup all of the appropriate network settings and can also be set up to trigger a script on connection.

Windows 2003 CMAK
Windows 2008 CMAK

[Domino]

As long as you have the DNS settings right this should work, there is just no mechanisum to trigger scripts unless you ues the "Connect using dial up connection" option at the logon screen which will do a full logon over the VPN.

surely that would only work with domain machines dialling in from a external location?

unless I'm being foolish....

[SYNACK]

surely that would only work with domain machines dialling in from a external location?

unless I'm being foolish....

Nope, you are correct the machine would need to be domain joined to use this feature. The CMAK is probably the best long term solution for remote users that aren't domain joined as they never remember to run a script.

[mrforgetful]

Cheers guys I'll take a look into it when I get chance.