Can not VPN to older NT4 VPON server
ok, With my new computer (windos 7 64 bit home) I was unable to connect to a NT4 vpn server. So accoring to what I have read, I shelled out 100.00 toupograde my system to windows 7 pro 64 bit. But alass no matter what I do or configure I am unable to compete a vpn connection. IT seems to authroize just fine, but when connecgint the wan miniport, it just bombs out. If I specify it is a pptp connection I get an error 807, if I choose automatic I get error 800.... Ther are many machines both xp and win2k that are using and connecting to this vpn server. I need this new machine to connect, and I see not reason other then a failing of backward compatibility that I can not seem ot overcome.. Further more, every system editing application that has been mentioned within technebt ot microsoft ot anywhere else does nto exist on my machine, such as attempting to use NAPCLCFG.MSC to change ipsec policy which from my understanding may also be causing the issue. I have changed to network policy to allow for the connection of clients who support 40/56 bit encryption, but still no go. Sad to say I do not think that normal people do not understand how much backward compatibility is lacking, after several days I feel like there is dancing paperclip telling me tat I do not really want to connect to that network!
January 23rd, 2011 12:12pm

Your NT4 VPN Server may be using crypto algorithms that are no longer supported. Windows Vista used to have a workaround for that, but I am not sure if that is still an option in Windows 7. You can try the registry edit in this article to see if you can connect http://www.itworld.com/nlswindows070302 If that doesn't work then it's probably time to replace the NT4 VPN Server.Ray - Author of Windows 7 for XP Professionals
Free Windows Admin Tool Kit Click here and download it now
January 23rd, 2011 4:23pm

Hello Wwar and Hello Raymond (who is my neighbour next door btw, hallo buurman! ;-) Another solution would be to upgrade the NT4 Server with the strong encryption SP6a service pack. I found the usefull information below on a website called www.knowplace.org. The (Microsoft) links aren't functional anymore but I was able to find the SP6a download elsewhere. quoted from knowplace.org: " Windows NT4 server: If the server doesn't support 128-bit encryption, having the client won't help you much. Go to http://www.microsoft.com/ntserver/nts/downloads/recommended/SP6/128bitX86/ to download and install the high encryption service pack. After the high encryption service pack is installed, you will need to modify several registry keys to prevent rollback attacks against your RAS server. You can find the more information about the registry keys below at Q189595 and Q172215. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasMan\PPP - Add a DWORD: SecureVPN Value: 0x00000001. This forces your NT RAS server to use MSCHAP v2 only. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasMan\PPP\Chap - Add a DWORD: UseLmPassword Value: 0x00000000. This prevents your NT RAS from sending lanman hashes of the passwords. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\PPP\COMPCP - Add a DWORD: ForceStrongEncryption Value: 0x00000001. This forces the use of 128-bit encryption when the high-encryption service pack is installed. You will also need to set your RAS server to require encrypted password and data encryption. "
April 16th, 2012 7:49am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics