VPN Win8 Pro and Domain

pregunta

New Member
Messages
8
I was wondering if someone could shed some light on this situation:

I had a similar issue when adding vista pro and W7 pro to a domain. I found I had to turn the UAC setting all the way off to have the VPN connections appear once the machine was connected to a domain.

Fast forward to Win8. Once the machine was connected to the domain can't see created VPN connections even after turning the UAC all the way off. I assume it is a GPO item I can change but I can't find any reference to what GPO or registry setting I should change to allow use of the VPN connections.

Does anyone have any insite on what I can change?
 

My Computer

System One

  • OS
    7, 8, xp, etc
Welcome to the forum pregunta.

Which server is hosting this Domain?
 

My Computer

System One

  • OS
    Windows 8.1 Pro WMC
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Home built
    CPU
    Q9650 @ 4.05 GHz
    Motherboard
    Gforce 780i SLI FTW
    Memory
    8GB Gskill DDR2 1200Mhz
    Graphics Card(s)
    GTX-480
    Sound Card
    Asus D2 Xonar
    Monitor(s) Displays
    HannsG
    Screen Resolution
    1680x1050
    Hard Drives
    Gskill 120GB SSD
    PSU
    Thermal Take 1000watts
    Case
    Thermal Take Xtreme
    Cooling
    9 fans air cooled
    Keyboard
    G15 logitech
    Mouse
    G9 logitech
    Internet Speed
    50mbps
Figured it out. Open GPMC on the machine you use to edit your Domain-group policies.
The setting is under User Configuration->Administrative Templates->Network Connections->"Ability to change properties of an all user Remote Access Conections"

You have to enable it.
 

My Computer

System One

  • OS
    7, 8, xp, etc
I'm glad you found a setting that fixes your problem, I certainly didn't have a chance of finding that setting and apparently nobody else could find it either as I came across similar complaints about Windows 8 not seeing VPN's.

What's interesting is that the setting you described is to allow you to change the properties of an all User Remote Access connection.

The problem you described was to make the VPN connections appear after you connect to the Domain.

I guess this loosely resembles a setting required to allow for VPN connections but it's certainly not very specific about doing what it's supposed to do.

It's no wonder I found so many similar complaints about VPN access from Windows 8 but with no clear way to fix the problem. This setting may come in handy for other people having this VPN access problem.

This is very strange and I'm surprised this setting had the desired effect, you must have tried every last one of those settings before you found the right one. :confused:
 

Attachments

  • ABILITY TO SEE VPN CONNECTIONS ON DOMAIN.PNG
    ABILITY TO SEE VPN CONNECTIONS ON DOMAIN.PNG
    34 KB · Views: 327

My Computer

System One

  • OS
    Windows 8.1 Pro WMC
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Home built
    CPU
    Q9650 @ 4.05 GHz
    Motherboard
    Gforce 780i SLI FTW
    Memory
    8GB Gskill DDR2 1200Mhz
    Graphics Card(s)
    GTX-480
    Sound Card
    Asus D2 Xonar
    Monitor(s) Displays
    HannsG
    Screen Resolution
    1680x1050
    Hard Drives
    Gskill 120GB SSD
    PSU
    Thermal Take 1000watts
    Case
    Thermal Take Xtreme
    Cooling
    9 fans air cooled
    Keyboard
    G15 logitech
    Mouse
    G9 logitech
    Internet Speed
    50mbps
Well. After reading your post I checked the setting to make sure that was what fixed the problem. I was Wrong. I had logged in as the domain admin and the settings had held from the previous log in. I restarted the machine this morning and the VPN connections are gone again.
 

My Computer

System One

  • OS
    7, 8, xp, etc
Well. After reading your post I checked the setting to make sure that was what fixed the problem. I was Wrong. I had logged in as the domain admin and the settings had held from the previous log in. I restarted the machine this morning and the VPN connections are gone again.

Oh, well that is unfortunate, and now we are back to square one with this problem.

I did come across a couple of threads at TechNet about this same problem but nobody seems to have an answer yet.

Some of those people were very upset about this problem and they all said it was working on Windows 7.
 

My Computer

System One

  • OS
    Windows 8.1 Pro WMC
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Home built
    CPU
    Q9650 @ 4.05 GHz
    Motherboard
    Gforce 780i SLI FTW
    Memory
    8GB Gskill DDR2 1200Mhz
    Graphics Card(s)
    GTX-480
    Sound Card
    Asus D2 Xonar
    Monitor(s) Displays
    HannsG
    Screen Resolution
    1680x1050
    Hard Drives
    Gskill 120GB SSD
    PSU
    Thermal Take 1000watts
    Case
    Thermal Take Xtreme
    Cooling
    9 fans air cooled
    Keyboard
    G15 logitech
    Mouse
    G9 logitech
    Internet Speed
    50mbps
It's definetly fixable. It's just a matter of finding out what GPO effects it or what domain group to add the user to or what combination of the two.

If I login as the domain administrator it works fine....

This issue is present with the pre and post server 2012 group policy files...
 

My Computer

System One

  • OS
    7, 8, xp, etc
I'd recommend running gpresult /h gpresult.html as both a domain admin and a domain user, and see what the differences are between the settings in the two .html files.
 

My Computer

System One

  • OS
    Windows 8.1 x64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom
    CPU
    Intel Core i7 4790K @ 4.5GHz
    Motherboard
    Asus Maximus Hero VII
    Memory
    32GB DDR3
    Graphics Card(s)
    Nvidia GeForce GTX970
    Sound Card
    Realtek HD Audio
    Hard Drives
    1x Samsung 250GB SSD
    4x WD RE 2TB (RAIDZ)
    PSU
    Corsair AX760i
    Case
    Fractal Design Define R4
    Cooling
    Noctua NH-D15
It's definetly fixable. It's just a matter of finding out what GPO effects it or what domain group to add the user to or what combination of the two.

If I login as the domain administrator it works fine....

This issue is present with the pre and post server 2012 group policy files...

You have access to the VPN through an Admin account but not a standard Domain User account.

It sounds like you need to add the standard Domain users to the proper user group which you have given access too using the Radius Server settings per the link below.

Configuring Active Directory (Windows 2008 Server R2) RADIUS Server for OpenVPN Access Server | Documentation
 

My Computer

System One

  • OS
    Windows 8.1 Pro WMC
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Home built
    CPU
    Q9650 @ 4.05 GHz
    Motherboard
    Gforce 780i SLI FTW
    Memory
    8GB Gskill DDR2 1200Mhz
    Graphics Card(s)
    GTX-480
    Sound Card
    Asus D2 Xonar
    Monitor(s) Displays
    HannsG
    Screen Resolution
    1680x1050
    Hard Drives
    Gskill 120GB SSD
    PSU
    Thermal Take 1000watts
    Case
    Thermal Take Xtreme
    Cooling
    9 fans air cooled
    Keyboard
    G15 logitech
    Mouse
    G9 logitech
    Internet Speed
    50mbps
It's not being able to connect using the VPN Server, it is that the physical icons that you click on to connect to the VPN that are not present. Logged into the machine as the Domain admin account, the connections appear in the "change adapter settings" catagory under Network connection and sharing. If I log in as a domain user the connections are gone.
BTW, all domain users are admins locally on their mahines.

I ran gpresult /r and from what I saw for both were essentially the same. Give or take the poolicies I have differentiated.
 

My Computer

System One

  • OS
    7, 8, xp, etc
How were the VPN connections created?
 

My Computer

System One

  • OS
    Windows 8.1 x64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom
    CPU
    Intel Core i7 4790K @ 4.5GHz
    Motherboard
    Asus Maximus Hero VII
    Memory
    32GB DDR3
    Graphics Card(s)
    Nvidia GeForce GTX970
    Sound Card
    Realtek HD Audio
    Hard Drives
    1x Samsung 250GB SSD
    4x WD RE 2TB (RAIDZ)
    PSU
    Corsair AX760i
    Case
    Fractal Design Define R4
    Cooling
    Noctua NH-D15
I created the cnnections both with a CMAK installer and a through the wizard.

Wierd thing is that the other Win 8 machine that is on the domain isn't exhibiting the same problem. I checke the rights in the "Domain users and Computers" dialog and they seem correct. So now it seems reated to just that computer. Time to start digging.
 
Last edited:

My Computer

System One

  • OS
    7, 8, xp, etc
It's not being able to connect using the VPN Server, it is that the physical icons that you click on to connect to the VPN that are not present. Logged into the machine as the Domain admin account, the connections appear in the "change adapter settings" catagory under Network connection and sharing. If I log in as a domain user the connections are gone.
BTW, all domain users are admins locally on their mahines.

I ran gpresult /r and from what I saw for both were essentially the same. Give or take the poolicies I have differentiated.

The link I posted showed that in order for domain users to connect with VPN's on the domain you would need to elevate the permission level of those users. Have you tried to create a VPN access group and added the clients to that group.
 

My Computer

System One

  • OS
    Windows 8.1 Pro WMC
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Home built
    CPU
    Q9650 @ 4.05 GHz
    Motherboard
    Gforce 780i SLI FTW
    Memory
    8GB Gskill DDR2 1200Mhz
    Graphics Card(s)
    GTX-480
    Sound Card
    Asus D2 Xonar
    Monitor(s) Displays
    HannsG
    Screen Resolution
    1680x1050
    Hard Drives
    Gskill 120GB SSD
    PSU
    Thermal Take 1000watts
    Case
    Thermal Take Xtreme
    Cooling
    9 fans air cooled
    Keyboard
    G15 logitech
    Mouse
    G9 logitech
    Internet Speed
    50mbps
Back
Top