Event ID 20271: The account does not have permission to dial in

Chicago Area Laptop for rent: $35 per day plus $10 for additional day

Event ID 20271: The account does not have permission to dial in

Event ID 20258: user connected on port VPN3-127 does not have Remote Access privilege

Situation: After moving the RRAS server from one Windows 2008 server to another Windows 2008 server, the VPN user can't logon with this error: "The account does not have permission to dial in". The Event Viewer also shows Event ID 20271 and 20258.

Source: RemoteAccess
Event ID: 20271
Task Category: None
Level: Warning
Keywords: Classic
Description:
CoId={NA}: The user chicagotech\help connected from x.x.x.218 but failed an authentication attempt due to the following reason: The account does not have permission to dial in.

Source: RemoteAccess
Event ID: 20258
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Description:
CoId={NA}: The account for user \chicagotechhelp connected on port VPN3-127 does not have Remote Access privilege. The line has been disconnected.

Cause and Resolution: when we opened Network Policy Server (NPS) from the Administrative Tools, we found the Connections to Microsoft Routing and Remote Access server was set "Deny Access" as shown below.

2008 RRAS issue

To fix it, double clicked on the "Connections to Microsoft Routing and Remote Access server" and check "Grant access".

Post your questions, comments, feedbacks and suggestions

Contact a consultant

Windows 2008 How to

How to configure default gateway in Windows 2008 and Vista with two gateways · How to configure windows 2008 NPS · How to configure virtual networks on ...
www.howtonetworking.com/server/w2008.htm

Bob Lin Photography services

Real Estate Photography services