Hi, I've just installed Windows 7 Professional on my laptop to discover that none of my VPN connections work any more. I was previously running Windows XP, and have a variety of VPN connections to various clients for remote support. What happens is that no matter which VPN connection I try and connect to, it appears to start connecting and then it reaches the "Verifying Username and Password" stage, and then hangs. I've left it sitting for 20 minutes, and it goes no further than this point. If I try and cancel connecting it makes no difference, and If I right click on the VPN connection in the network connections thing, I only get the option to click on properties, disconnect is greyed out. If I end task the Connecting to network box, it requires a restart of explorer.exe, after which I can then right click on the VPN connection and select disconnect. I've also discovered if I change the settings of a vpn connection then I get an explorer.exe crash and the settings don't apply. It doesn't seem to matter which VPN I connect to - I've got VPN's that connect to SBS 2003, Server 2003, Server 2008, and several variations of them. The VPN's work ok on our test machine (Windows 7 Ultimate RC). The last event that appears in the event log is this: Log Name: Application Source: RasClient Date: 30/10/2009 3:46:59 p.m. Event ID: 20224 Task Category: None Level: Information Keywords: Classic User: N/A Computer: Tim-Laptop.soundbusiness.local Description: CoId={CAD5A976-B101-488E-A5BB-94006ABDE90C}: The link to the Remote Access Server has been established by user SOUNDBUSINESS\t.wetherell. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="RasClient" /> <EventID Qualifiers="0">20224</EventID> <Level>4</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2009-10-30T02:46:59.000000000Z" /> <EventRecordID>1350</EventRecordID> <Channel>Application</Channel> <Computer>Tim-Laptop.soundbusiness.local</Computer> <Security /> </System> <EventData> <Data>{CAD5A976-B101-488E-A5BB-94006ABDE90C}</Data> <Data>SOUNDBUSINESS\t.wetherell</Data> </EventData> </Event> I don't have access to run a network monitor on the servers in question, but as there are several different servers that I am unable to connect to, I think the problem is on the machine itself. Any help/ideas would be appreciated.

Hi, Based on my research, please check the following: 1. If the Windows 7 client connects to the network via a router, please bypass the router and connect directly to check how it works. 2. If possible, please take the client to another network to have a check. 3. If you installed any firewall or anti-virus software, please remove it, reboot the computer and check if you can establish the connection. Hope this helps. Thanks. Nicholas Li - MSFT

Hi Nicholas, Thanks for your reply. 1. It connects through a Netscreen 5gt, which has not had any problems with vpn connections in the past, and which does not prevent Vista or our Windows 7 RC machine from connecting to a VPN. 2. I've tried connecting it from home, but it doesn't make any difference. 3. We are running Sophos antivirus, which has no tie ins to the network, but I uninstalled it anyway and it didn't make any difference. Again, the same Antivirus software doesn't cause any issues for Vista or our Windows 7 RC machine. Is there anything else I can try?

Hi, Thank you for your update. Please also try the following to have a check: 1. Please ensure that the NIC driver is for Windows 7 and it is up-to-date. 2. How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7 Thanks. Nicholas Li - MSFT

Hi Nicholas, I've just installed the latest driver for my NIC, it is a Broadcom NetXtreme 57xx Gigabit Controller - it didn't make any difference. I also tried disabling it and connecting via the onboard wireless (Intel(R) PRO/Wireless 3945ABG) and had the same result. I tried doing a clean boot, but even with all of the non-microsoft services and startup items disabled, I still had the same issue. Any other ideas?

Hi Nicholas, I'm quite keen to get this sorted out as it is impacting my ability to support customers. Is there anything else I can do or check?

Hi, May I know the following? 1. Are you are using some other VPN clients or just the one in Windows? 2. Which type of VPN you are using, PPTP or L2TP? Please run the following command in an elevated command prompt to disable Windows Firewall and check the issue: Netsh advfirewall set allprofiles state off For more information about netsh command for WFAS, please also refer to: Netsh Commands for Windows Firewall with Advanced Security Meanwhile, if you have a new-installed Windows 7 professional computer, please also check if it can establish the connection. Thanks. Nicholas Li - MSFT

Just to let you know I have the same problem, the only thing we have in common is a "Broadcom NetXtreme 57xx Gigabit Controller "Might be worth a look :)ThanksAlex

Just a quick update, I have updated the Drivers from Broadband and that has not helped.DohAlex

Hi Nicholas, I'm just using the Windows VPN client. There is a vpn client that we use for one particular vpn, but it does not install on Windows 7. I'm not sure what type of VPN they are - one is to 2003 server, and one is to 2008 server. On Win XP and on the Win 7 RC machine the type is set to automatic, and they worked fine. I've tried connecting after disabling the Windows firewall, and it didn't make any difference. There is another Win 7 pro PC around, but it is not the same type and the guy who is using it is out of town for a few days. I'll try and see if I can get it to work on his PC when he gets back.

Hi AMP7,I have been experiencing exactly the same problem with one of my VPN connenctions (Windows 7 Enterprise build 7600).I have resolved it by explicitly setting the Type of VPN property on Security tab to Point to Point Tunneling Protocol (PPTP). It seems that when this property is set to Automatic the WAN Miniport defaults to IKEv2 (and gets stuck if this is not the VPN type used). You can both observe and change this for any VPN connection by going to Control Panel > Network and Internet > Network Connection.So I suggest you explicitly set the Type of VPN property to the appropriate value (probably PPTP if no certificates are used but I suppose you already know this).Regards

Hi Tomislav, Thanks for that. Worked like a charm. I probably should have tried it earlier, but I didn't think that automatic would cause any issues, heh. Much Appreciated.

Hi, I'm facing the same issue. My Connection Manager is set to WAN Miniport IKEv2. I don't see a Security Tab under properties. Where can I find the setting to change it from ikev2 to PPTP? Perhaps I'm missing something?

Hi Tomislav or anyone else that can helpI have two laptops, my old one running on XP and a new one for a week with Windows 7 Basic. I have a DSL wireless internet connection.On the xp macine I connect to VPN with the built in XP VPN client with no hassle.On the Win 7 machine with same settings, and set to PPTP, I get an error 619 and if the XP macine is connected at that stage it get disconnected.On the other hand, if I connect with my cellphone it works perfectly, so that tells me that there is a minor setting I overlook..Please help!

Hi Tomislav or anyone else that can help I have two laptops, my old one running on XP and a new one for a week with Windows 7 Basic. I have a DSL wireless internet connection. On the xp macine I connect to VPN with the built in XP VPN client with no hassle. On the Win 7 machine with same settings, and set to PPTP, I get an error 619 and if the XP macine is connected at that stage it get disconnected. On the other hand, if I connect with my cellphone it works perfectly, so that tells me that there is a minor setting I overlook.. Please help! I'm facing a similar problem. I have a Windows 7 x64 running a XP virtual machine. I can establish VPN connections from virtualized Windows XP but, using the same configuration at the same network, I can't do it from my Windows 7. Windows 7 reports error 629 on connection and error 829 on application log. RAS logs didn't show me anything that could help. I have forced use of PPTP on both connections (XP and Windows 7).

I have the same issue. Any solutions? I cannot connect to my vpn server from my home but I can from another internet connection.Alberto Diaz Martin twitter://@adiazcan | http://geeks.ms/blogs/adiazmartin

I also am getting the exact same error as all of these people, namely error 619 when trying to create the VPN. In 'automatic' network type it seams to hang on my user name and password, and when i set it to pptp (which is what we use) i am immediately denied access. Seams like there are scores of people out there who can't do their work because of this issue, so it would be nice if someone from Microsoft could give us some (useful) guidance. Clearly this is not an isolated issue.

Hi I have the same problem. I can establish VPN connection on XP machine to my workplace but I cant do it on Windows 7 Enterprise N. Does anyone know how to fix? please help. I am sufferring from not being able to support my customer. Tony

I have the same problem and have tried setting it to PPTP. Works fine from an XP machine on the same network. I am running Windows 7 Home. Did this get resolved ? Kris

Thanks Microsoft for providing a solution for this. I have same issue with win 7 but not xp

I had same problem and after playing with every setting on my crappy netgear router, I fixed it by simply enabling the spi firewall. That is unchecking "Disable SPI Firewall" under wan setup. Go figure.

This worked for me. Thank you.

Don't thank em too quickly, they couldn't solve it. Was solved by another user. Thanks to tomislav s!

I never really trusted W7 completely and that's why I never gave up using XP. I have Laptop with dual boot XP and W7. I'm stuck with the very similar problem regarding VPN for over a year and a half. When i need to work in my company from home, simply reboot to XP. :/

This issue has not been resolved. I have a Win 7 pro machine and have the same issue as everyone else. The Setting changes mentioned do not help. I have connected to the same VPN server via an XP box with no problems. All I have uncovered in my research is that maybe my VPN uses and older version of CHAP that Win 7 does not support. Can a Microsoft person please clear this up?

Same problem. W7 PPTP connection hangs. Ran NetMon.exe (like WireShark, a network traffic capture tool) and see several IPCP "Configure-Nak" messages. I reconfigured the VPN Client to not have compression checked and to not require encryption and I progressed to the connected state. BUT: no traffic would pass. The status indicated "Connected" but there was also a little empty park bench icon at of the network status indicating "No network access". If I do an "ipconfig /all" at the command prompt there is a "PPP Adapter" entry, and it has the right IP Address and DNS servers configured at the server side, but the Gateway is "0.0.0.0". In the NetMon.exe capture, however, I do see an IPCP "Configure-Request" message from the server to client including the correct gateway address. The server side appliance is a Netopia 3346N-ENT DSL Router. It worked fine under XP. MICROSOFT: Is it possible some mods were made to the PPTP stack for W7 that renders it backwardly incompatible with a chunk of the installed base of routers out there; possibly millions? I have the NetMon capture if there's an IPCP Guru out there interested in dissecting it !

Same aggravating issue here. Windows 7 domain member PPTP VPN connection to Windows 2003 ISA Server 2006 VPN. Will "connect" but I cannot do anything. These exact same VPN settings have worked for years for XP clients. Nothing has changed. I can ping machines from the command prompt, but cannot browse the UNC path or access the mapped drives. VPN is set to PPTP so please dont recommend I try that! Ideas??!

Hi, this thread just wont die :). Some quick ideas (not saying they will work), all based on the premise that you are actually connected at some level (ping works, right?): Try forcing your traffic through VPN on the client side by checking the "Use default gateway on remote network" on your client VPN connection and reconnect. This may force all routes for unknown names to go through VPN connection. (If it works just remember to disconnect your VPN before you try watching live video :).) ISA server, while I really liked it for security and performance, often drove me nuts during configuration - please verify that your client machine is correctly configured for communication with ISA because if it isn't your ISA may be doing some deep packet inspection and saying - sorry no passage. I'm not able to be more specific since I've last worked with ISA some 4 years ago when it was possible to deploy it with SBS 2003 on single machine. (Also, since troubleshooting ISA is often quite time consuming you may leave this step for the end.) Your client firewall may be blocking some reply traffic - if you also see your network connection as "park bench" you are running in "Public" profile blocking most network traffic. Depending on your network policies you may be able to change the profile of the connection in" Network and Sharing Center". However, the cause of this is that your client machine isn't correctly recognizing your domain network through VPN and the issue may randomly reappear. If you are using some custom firewall solution try disabling it as part of your troubleshooting. Depending on your network settings (including the router on the client side) you may be experiencing MTU issues (however this is a long shot since your XP clients were doing OK...). Confirm the maximum size of the package by pinging computers through VPN with "ping <IP address of target computer> -l <package size in bytes> -f" (that is a lowercase "L" in first ping parameter). If you get replies through VPN with non-fragmented packet size of 1372 bytes you are usually OK. If that works try increasing the packet size without the -f flag (just to see if routers correctly handle packet fragmentation). Sorry for not being more helpful and the amount of text. Regards, Tomislav

Hi all, This is a long thread and I don't know if I should start a new one. About two weeks ago I was using my Win 7 Ultimate Laptop's VPN Connection just fine. I went to use it 3 days ago and it hangs on "Verifying Username and Password". I have always had it set to PPTP and I tried checking and unchecking "Use default gateway on remote network." I have checked the same VPN access on several virtual machines XP and Win 7 (on the same Win 7 Ultimate laptop) and neither worked. So that leads me to either my network adapters or my Router/ISP (Clearwire Hotspot 4G Router). I setup the VPN successfully on a Win 7 Enterprise laptop using my Clearwire Hotspot Router so that clears my Router ISP. Next I took my Win 7 Ultimate machine off the Broadcomm 4355 Wireless Adapter and hooked it into my work LAN using Ethernet cable. The VPN Connection still hangs. So I think I have cleared my adapters. I read somewhere that security descriptors may be the problem. The thread didn't give any details though. Can someone give me a link on security descriptors for Windows 7. I remember once having a firewall issue and a KB led me through it but that might have been for XP only. I've done everything I know and I'm pretty good at troubleshooting PCs. ThanksJohn Donnelly

Having the same issues here on W7-64bit after a recent MS W7 update (February 15th-17th) !!!. Connection was always iffy before then anyway. However found that turning OFF LCP extentions in PPP settings of the "options" page of the VPN adapter properties dialog has worked for me. PS. Microsoft, please send me the source code or the PDBs and I'll debug or rewrite the dammned thing :)

As an update I have found that my my Win 7 Virtual Machine Guest is not only unable to make the VPN connection any more but it blocks the Host Win 7 64 VPN connection. When the VM is off the connection works fine on the Host. I'm at a loss. I hate to delete the VM but it may be necessary.John Donnelly

I have discovered for my VPN, where the Windows 7 and iPad clients hang on "verifying username", I believe this relates to a router setup problem on the ISP. From what I've discovered, this is only occurring for clients accessing the VPN via an AT&T Internet connection. When I use another ISP, such as Charter/Comcast, United, Verizon, et al, my VPN connection sails through. Curious if anyone else has experienced this problem with AT&T Internet and verified it works elsewhere.

This exactly my problem I switch from Time Warner to AT&T and I can no longer connect. With Time Warner I had no problems. I have deleted the connection and recreated it and tried changing all of the connection option with no luck.

I built 2 dell d430s just now. Both with win7 pro sp1. Can't connect one to the other using vpn either locally or over the internet (one using a 3g sim) Gets stuck on verifying username etc. No AV installed. Its vanilla on both. Tried with a different Win 7 pc and an xp client, same issue. Seems to be an unworkable implementation of vpn.

I had a similar problem. A tablet would connect while a PC would not. I was getting and error 619. Interestingly by rebooting my home Wifi and DSL router the problem went away

A very long thread indeed. Perhaps these details might ring the bell. I use dedicated MS Windows 7 professional VMs on a secure ESX to access my clients. Initialy a VPN just works always without any optional changes in the properties. But if a connection is left on and it disconnects on timeout there is no way to reconnect from that VM again - error 619 no matter what I change. Deleting the VPN and re-configuring it, changing the IP address of my VM, tweaking optional parameters - nothing works. What works is a new VM or any other computer in the same network. It's only this VM which timed out that cannot reconnect. A fresh new VM works of course until the connection inadvertently times out. It is puzzling. I can work around it but I would like to know what's wrong.