Hi Jim, Check out the ISA 2000 VPN Deployment Kit. I know the answer is in there. HTH, Tom www.isaserver.org/shinder Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 MVP -- ISA Firewalls -----Original Message----- From: Jim [mailto:jmay@xxxxxxxxxx] Sent: Thursday, June 09, 2005 9:57 PM To: [ISAserver.org Discussion List] Subject: [isalist] L2tp VPN http://www.ISAserver.org Hi, I have been working with certificates my problem is this.......when i try to connect to the isa2004 vpn remote access server usint L2TP I get an error message stating the security negoation failed. this happens on a non domain member using web enrollment from a offsite computer. I suppect the computer certificate is not proply installed?? When I use a laptop offsite which is autoenrolled in the certificate program all works fine. I can use pptp with eap authtencation from the off site machine non domain member computer. My question is this how can I tell I have the right machine certificate installed on the off site machine for L2TP log in??? All the auto enrolled machine's have a computer certificate in the personal store in the format machine name.domain_name.crt Help if you can how do I enroll a non domain member computer in the machine cert program so I can get L2TP access??????????? Jim ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx