Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an ISA Server 2006 Server acting as a VPN server and it is working fine for all users.

However, there is one particular user who gets an error “916, the interface is in a disabled state.”

A similar error is also logged in the event log of the ISA Server

In Active directory, the user is a member of the "Domain Guest" groups. Other members of this group are able to VPN in fine so I don't think it is a permissions thing.

Any ideas anyone?

share|improve this question
Is the problem user based or machine based? Have them try on another laptop. I suspect Joshua may be on to the right answer – Matt Simmons Jun 24 '09 at 12:06

I know, with the same problem, I had to reinstall the VPN client. The problem was a corrupt file. That may not fix it, though.

share|improve this answer

After raising a support incident with Microsoft, the problem is solved in a rather bizarre way.

The user login in Active directory matched the name of an IPSEC Demand Dial interface I had set up which was disabled. Enabling the demand dial interface resolved the problem.

Probably a bug in the RRAS software but at least I have a work around for now

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.