Home | Site Map | Cisco How To Net How To | Wireless | Search | Forums | Services | Setup Guide | Chicagotech MVP | About Us | Contact Us|

 

Event ID 20271: The account does not have permission to dial in

Event ID 20258: user connected on port VPN3-127 does not have Remote Access privilege


Situation: After moving the RRAS server from one Windows 2008 server to another Windows 2008 server, the VPN user can't logon with this error: "The account does not have permission to dial in". The Event Viewer also shows Event ID 20271 and 20258.

Source: RemoteAccess
Event ID: 20271
Task Category: None
Level: Warning
Keywords: Classic
Description:
CoId={NA}: The user chicagotech\help connected from x.x.x.218 but failed an authentication attempt due to the following reason: The account does not have permission to dial in.



Source: RemoteAccess
Event ID: 20258
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Description:
CoId={NA}: The account for user \chicagotechhelp connected on port VPN3-127 does not have Remote Access privilege. The line has been disconnected.

Cause and Resolution: when we opened Network Policy Server (NPS) from the Administrative Tools, we found the Connections to Microsoft Routing and Remote Access server was set "Deny Access" as shown below.



2008 RRAS issue

To fix it, double clicked on the "Connections to Microsoft Routing and Remote Access server" and check "Grant access".

Post your questions, comments, feedbacks and suggestions

Contact a consultant

Related Topics

Windows 2008 How to

How to configure default gateway in Windows 2008 and Vista with two gateways How to configure windows 2008 NPS How to configure virtual networks on ...
www.howtonetworking.com/server/w2008.htm

 

 

 

 

 

  This web is provided "AS IS" with no warranties.
Copyright 2002-2017 ChicagoTech.net, All rights reserved. Unauthorized reproduction forbidden.