DFS Share prompts client for credentials only when accessed over VPN

Question

I have several fully qualified DFS shares (server 2019) that work normally when users are connected to the on-premise network. The users are domain joined to AD.

When they connect with VPN, it prompts them for credentials. The prompt already has the user name pre-filled in as user@domain.com. I don't know where it is getting this user account name from. Altough, we are using this account name in the VPN client.h

Entering in credentials as DOMAIN\User works until the next time it asks. Is there anyway. to troubleshoot passthrough authentication?

Answer 1

Hello,

I suggest that you may check the options below:

VPN Server Configuration: Check the settings on your VPN server, and ensure that it is configured to accept passthrough authentication and that it is communicating properly with your on-premise Active Directory.

DNS and Domain Configuration: Verify that your DNS settings are correctly configured for both the on-premise network and the VPN network. Ensure that the VPN network is able to resolve domain names for your Active Directory domain.

Group Policy: Review any Group Policy settings related to VPN authentication and ensure that they are configured correctly to allow passthrough authentication for DFS shares.

Event Logs: Check the event logs on both the client and server side for any relevant authentication or networking errors that could be impacting the passthrough authentication.

Best Regards,

Hania Lian

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

I think this might work.

With notepad open  %APPDATA%\Microsoft\Network\Connections\Pbk\rasphone.pbk

Set UseRasCredentials = 0