Event ID 20271: The account does not have permission to dial in
Event ID 20258:
user connected on port VPN3-127 does not have Remote Access privilege
Situation: After moving the RRAS server from one Windows 2008 server to
another Windows 2008 server, the VPN user can't logon with this error:
"The account does not have permission to dial in". The Event Viewer also
shows Event ID 20271 and 20258.
|
|
Source: RemoteAccess
Event ID: 20271
Task Category: None
Level: Warning
Keywords: Classic
Description:
CoId={NA}: The user chicagotech\help connected from x.x.x.218 but failed an
authentication attempt due to the following reason: The account does not
have permission to dial in. |
Source: RemoteAccess
Event ID: 20258
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Description:
CoId={NA}: The account for user \chicagotechhelp connected on port VPN3-127
does not have Remote Access privilege. The line has been disconnected.
Cause and Resolution: when we opened Network Policy Server (NPS) from the
Administrative Tools, we found the Connections to Microsoft Routing and
Remote Access server was set "Deny Access" as shown below.
 To fix it, double clicked on
the
"Connections to Microsoft Routing and Remote Access server" and check "Grant
access".
Post your
questions, comments, feedbacks and suggestions
Contact a consultant
Related Topics
|
