VPN error 691 - access denied

Case Study – VPN error 691: Access denied because username and/or password is invalid on the domain and “You credentials have failed remote network authentication”

Situation: the client uses Windows sever 2000 as VPN server for 2 years without any problem. Now, he can’t establish the VPN any more. When he tries to connect to the VPN, a logon screen shows up asking for the username, password and logon domain, which he never sees before. The screen displays this message: “You credentials have failed remote network authentication” (Figure). If you re-enters the username and password, he will receive Error 691: Access denied because username and/or password is invalid on the domain.

Troubleshooting: 1. We ask him to try the different username. That doesn’t work.

2. We ask him to re-set the password, but no luck.

3. Make sure the Include Windows logon domain check box is unchecked in the Options tab of the dial-up connection's Properties dialog box. He confirms it is unchecked.

4. Have him to enter the domain name. That doesn’t work.

5. Try to enter computer host name (Figure). Bingo, it works.

Analysis: After we establish the VPN by entering the computer name, the client recognizes he just joined this computer to his new domain controller last weekend. Since the computer joins a domain network, the computer can be logon as local computer user or domain user. Therefore, the old credentials doesn’t work and he needs to enter the logon domain (computer name for authentication).

Post your questions, comments, feedbacks and suggestions

Contact a consultant