0

I have enabled Point-to-Site connectivity to a virtual network in my Azure environment. I am able to remotely connect to the VPN tunnel and can ping the private address of the Azure virtual machine. I can also RDP into the server. The problem is that I am not able to access file shares. On this virtual network we also have a site-to-site vpn up so that the office can access the server. The site-to-site is working fine. The users can access the shared folders, query DNS, and authenticate against AD. Does anyone have any idea why ICMP and RDP would work over the point-to-site VPN but file share browsing would not? I have confirmed that DNS is resolving correctly.

0

I tested it in my lab and I encountered same issue with you.

Here are the steps how I solve this issue.

First, I perform a network capture on the Server side.

Capture

I find that it is the server which wants to disconnect the session. And the error code is "STATUS_MORE_PROCESSING_REQUIRED", which means that additional authentication information is to be exchanged.

I suspect that the client is using the credential of the VPN to access the shared folder on server. So I create a VPN profile manually and set the UseRasCredentials to 0. The path of the PBK file is "%userprofile%\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk".

Then my client is able to access the file share.

If it isn't your situation, you are also able to start troubleshooting by performing a network capture first.

=======================================================================

Update

To manually create a VPN profile, we need to find the host name of Azure network gateway. The host name is logged in the rasphone.pbk mentioned above. Note: we need to install the profile downloaded from the Azure first, so the configuration will be written to the rasphone.pbk.

Then, we just need to create a SSTP VPN profile with this hostname. The authentication method is "Microsoft:Smart Card or other certificate ---> Use a certificate on this computer".

  • Can you give me some instruction on how to create the Azure VPN profile manually? – 360VisionIT Aug 31 '16 at 13:06
  • @360VisionIT I'll update my answer later to make a better explanation. – Steven Lee - MSFT Sep 1 '16 at 1:44
  • Thank you. All I did was change the UseRasCredentials from a 1 to a 0 in the rasphone.pbk file. It works like a champ now. – 360VisionIT Sep 3 '16 at 3:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.