VPN allows connection, but doesn't allow access to files

brettadamsga · 23 Mar 2012

I have set up a Windows 7 machine that has a VPN incoming connection set-up, I have set up my router properly so that someone can connect via VPN, specifically me, from work, and from my laptop when I am out of the house. The reason for the VPN is to have the ability to have access to my files at my home office when I am away from it.

I an using a Mac with OS X 10.7 at work, and have set up the VPN and can see the VPN server that is at the home office, but when I open it, it give a connection failed error.

I can remote desktop with the VPN server, using team viewer and see that there is a connection and that it is my office mac.

Am I missing something that will allow me to view my files? Do I have something configured incorrectly? I have set up my network shares, is there a certain way that I need to set them up?

chev65 · 23 Mar 2012

Here is what I found on this. It's a typical problem with the LAN manager Authentication Level which has been causing problems Samba and SMB servers for while now.

Windows 7 will not work with Mac OS X Windows file sharing support by default. If you attempt to access a folder shared from Mac OS X, Vista will display a logon error repeatedly. The problem is that Vista, by default, will only use NTLMv2 for authentication, which is not supported by Mac OS X’s Windows Sharing service. The other problem is the Minimum Session Security for NTVLM SSP based Clients.
To get around this:
1. In Vista, open the Control Panel
2. Switch to “Classic” view
3. Double-click Administration Tools
4. Double-click Local Security Policy
5. Or Secpol.msc
6. Expand “Local Policies” and select “Security Options”
7. Alternate : Type secpol.msc to get editor up then
8. Locate “Network Security: LAN Manager Authentication Level” in the list and double-click it.
9. Change the setting from “Send NTMLv2 response only” to “Send LM & NTLM – use NTLMv2 session if negotiated”
10. Network Security: Minimum session security for NTLM SSP Based (including secure RPC) Clients
11. Change the setting from “require 128 bit” to unchecked (No Minimum)
12. Click OK
the real difference between vista and windows 7 procedure is 10 and 11

Or put more simply.

Control Panel - Administrative Tools - Local Security Policy

Local Policies - Security Options

Network security: LAN authentication level
Send LM & NTLM responses

Minimum session security for NTLM SSP
Disable Require 128-bit encryption

These pictures might help. :)