Windows 7 File Access

[geoffpeters]

Hello,

I have a remote user running Windows 7 who cannot access our local network over the OpenVPN connection. He is running as administrator and the firewall is off.


He can establish the VPN connection and is issued a valid IP address.

When he tries to connect to our domain, by entering a server IP address for example, he is not prompted the log on, there is no request for username/password.

He can ping the internal server address and gets a response.

Does anyone have a suggestion??

Thanks,
Geoff

[jcoffin]

How is he connecting to the domain? RDP, SMB, ? Is the Windows 7 VPN client properties changed so "run as administrator" is checked?

[sky-knight]

Then OpenVPN GUI icon must be manually adjusted to run as admin, or else it cannot update the local routing table on connection to actually do anything with the VPN.

There is no user name or password, it simply connects with the certificates installed in the client. The username / password authentication happens transparently when you connect to a windows resource over the network (usually).

[geoffpeters]

Perhaps I am missing something.

Yes, run as administrator is checked. The VPN connection is established OK.

With my XP clients I enter the server IP address in the "Run" dialog box as "\\xxx.xxx.xxx.xxx". There is no hosts file on the remote computer. This connects to that server and prompts for the user to enter username/password. The logon is then authenticated and the user can access files on the server.

Windows 7 seems to act differently.

Is there a better method I should be using?

Thanks,
Geoff

[sky-knight]

Nope, the same method works regardless of windows version.

The only thing that Windows 7 interjects is if a Windows 7 / Server 2008 device are hosting the windows file and print share, the default windows firewall configuration prevents VPN clients from accessing anything.

[geoffpeters]

The firewall on the remote Windows 7 machine is off.

[jcoffin]

After typing \\xxx.xxx.xxx.xxx is there any error or displayed text?

Also look at the logs on server at xxx.xxx.xxx.xxx you are connecting to see if there is any errors authenticating.

[geoffpeters]

There is nothing displayed. A Windows Explorer window opens with the IP address in the menu bar.

I see nothing unusual in the server logs. I guess I wouldn't see anything as there was never a request for credentials.

[geoffpeters]

Additional note: the remote user can ping the UT box LAN-side IPaddress.

[hlarsen]

the remote user can ping the UT box LAN-side IPaddress.

so the tunnel is up and operating properly.

if the target machine is using Untangle as its gateway, windows firewall is probably not off. you can run tcpdump on Untangle to watch the packets; just dump the internal interface while pinging the host through the VPN - if you see request packets but no return packets, it's a configuration issue on the target machine.