W9x systems don't understand and can't play right in a domain. There's really nothing you can do to help that. As far as having the correct credentials, those are determined by the interactive (console) logon account. If it doesn't match with the restrictions in place on the resource being accessed, you'll see the popup. The only way you can satisfy this is to have them log on to the local system "using he dial-up connection" at the logon screen. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: "michael" <mwisch@xxxxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Friday, February 15, 2002 07:31 Subject: [isalist] VPN, ISA and Rights issues http://www.ISAserver.org I currently have VPN working on our Windows 2000(native- active directory) network with our ISA2000 firewall. Authentication works like a charm, and users using win9x or win2000 machines can dial in without a problem. Yet there is a number of problems I can't seem to figure out. First, when a user tries to map a drive to a specific directory (using any OS) they are prompted for a password. With win2000 users they can at least type in their user id and password and the mapping will go through, but with Win9x users, they only getting prompted to put in a password with no id and this of course doesn't work. Why aren't their security credentials passing through when they dial in? They connect and can ping the internal servers, but their files rights don't seem to work. Another thing we are trying to figure out is why the login scripts don't work. Could you please point me in the right direction. I have plenty of info on how to setup a VPN, but I need info on how users can access their departmentfiles and personal files from home through VPN. I would like some type of login script to work for dial in users(we currently use Kixstart). Thanks in advance, -Mike ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')