The dreaded network share over vpn problem in vista

I have been working this one on and off for about two months now with no
clear resolution. Using Vista business to connect via VPN to a domain
network. Domain is all Server 2003 R2 SP2. I use the vista VPN client to
connect to a watchguard x700 firewall. Then i am supposedly on the network.
this setup works flawlessly for all of our XP Pro boxes. On vista i can ping
and remote desktop to anything on the network but cannot access DFS shares
via the mapped drives in My computer. Occasionally i can access the shares
via UNC navigation, but not always. Various errors occur. From the 'attempt
to compromise security' error to the 'network path not found' error. Here is
what i have tried to date.

Did net view , can see a list of all computers on the network.
did net view \\computername for the file server, sometimes all of the shares
show up, sometimes they don't.
Did net use \\computername /user:my username, recieved a 'account locked out
error. Thought that i go that one because i wasn't logged off of my desktop.
Logged off desktop and tried again. Same error.
Logged off of laptop and logged back on to refresh credentials. Problem
gets worse. No longer can see shares via net view \\computername
Disabled ipv6 for the VPN connection. No change in results.

Thought it might be the network metric bug (KB930163), Ran the hotfix, no
effect.

Wonder if some of this is how we map the drives to the shares. we use a
logon script built upon net use. Works fine when on the domain in both XP
and Vista.

Have another user with Vista Business on his laptop. Has same issue but he
says that if he stays vpn'd in for 20-30 minutes then the drives magically
start working. Network discovery is turned on for the Vista machines on the
domain. So i don't know why it would take 20-30 minutes.

I am pretty convinced that this is a bug. Some of my research indicated
that a similar issue happened with XP upon initial release. That got fixed
in SP1. I only hope that Vista SP1 fixes this one. Our firm depends heavily
on VPN since we all travel alot. Right now the problem is manageable. But
we upgrade hardware pretty aggressively. I will see more vista laptops
within the next six months to a year. I have five free upgrades sitting in
my drawer right now that I refuse to deploy until this and some other issues
are fixed.

would be nice to get a glimmer of hope from MS. I would be happy with a 'We
are aware of the problem and are working on a solution'. Dead silence is not
very comforting.
--
Russell Reid

Hi Russell, we are running into the exact same issue, except our VPN is a
SonicWALL SSL VPN Connection. All the same issues you describe. My XP Pro
SP2 machine (on a virtual host on my visat machine) works fine, but all users
Vista machines do not work.

Our DFS shares are mapped using a VBS script on logon.

If anyone can provide insight on this it would be great, as we work around
it but not efficiently, thanks


"Russell Reid" wrote:

> I have been working this one on and off for about two months now with no
> clear resolution. Using Vista business to connect via VPN to a domain
> network. Domain is all Server 2003 R2 SP2. I use the vista VPN client to
> connect to a watchguard x700 firewall. Then i am supposedly on the network.
> this setup works flawlessly for all of our XP Pro boxes. On vista i can ping
> and remote desktop to anything on the network but cannot access DFS shares
> via the mapped drives in My computer. Occasionally i can access the shares
> via UNC navigation, but not always. Various errors occur. From the 'attempt
> to compromise security' error to the 'network path not found' error. Here is
> what i have tried to date.
>
> Did net view , can see a list of all computers on the network.
> did net view \\computername for the file server, sometimes all of the shares
> show up, sometimes they don't.
> Did net use \\computername /user:my username, recieved a 'account locked out
> error. Thought that i go that one because i wasn't logged off of my desktop.
> Logged off desktop and tried again. Same error.
> Logged off of laptop and logged back on to refresh credentials. Problem
> gets worse. No longer can see shares via net view \\computername
> Disabled ipv6 for the VPN connection. No change in results.
>
> Thought it might be the network metric bug (KB930163), Ran the hotfix, no
> effect.
>
> Wonder if some of this is how we map the drives to the shares. we use a
> logon script built upon net use. Works fine when on the domain in both XP
> and Vista.
>
> Have another user with Vista Business on his laptop. Has same issue but he
> says that if he stays vpn'd in for 20-30 minutes then the drives magically
> start working. Network discovery is turned on for the Vista machines on the
> domain. So i don't know why it would take 20-30 minutes.
>
> I am pretty convinced that this is a bug. Some of my research indicated
> that a similar issue happened with XP upon initial release. That got fixed
> in SP1. I only hope that Vista SP1 fixes this one. Our firm depends heavily
> on VPN since we all travel alot. Right now the problem is manageable. But
> we upgrade hardware pretty aggressively. I will see more vista laptops
> within the next six months to a year. I have five free upgrades sitting in
> my drawer right now that I refuse to deploy until this and some other issues
> are fixed.
>
> would be nice to get a glimmer of hope from MS. I would be happy with a 'We
> are aware of the problem and are working on a solution'. Dead silence is not
> very comforting.
> --
> Russell Reid