I have no idea if this would have any thing to do with it, but in XP there is a new default setting under LAN Properties. There is a Authentication tab. By default, EAP type is set to Smart Card or other Certificate. This causes the client not to be able to change their password from the workstation if you are not using Smart Cards or a PKI setup. By changing this setting to MD5-Chanllange, the clients are able to change their password. As this appears to be an authentication related issue, you might want to look at this. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -----Original Message----- From: Darren Chang [mailto:darren@xxxxxxxxxx] Sent: Thursday, November 28, 2002 9:22 PM To: [ISAserver.org Discussion List] Subject: [isalist] XP VPN Client issue http://www.ISAserver.org Hi all, I am having a VPN connection problem with XP thru ISA VPN. I got the error 721 after the verification of user name and password. I only have this problem with XP. With w2k, it works great. Any idea? Does it have to do with XP clients setting or server end? I have ISA\SP1 installed on win2k\sp3. Thanks!! D ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: isalist@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')