24. Install and Configure Remote Access VPN on Windows Server 2019

[@mckalyster]

WOW WOW WOW. Can you image how well I felt after watching this????? Best practice ever

[@rickdeckard9810]

Thanks for not editing out the errors, troubleshooting is sometimes the best way to learn. Appreciate it!

[@ThatITGuyy]

Whoever put this video together, I literally struggled watching so many, because they left out key 0.1% facts of the info you were pointing out! Thank you for this video!

[@rydahl8370]

man these videos got me through my exam - MSFT Webcast real mvp

[@Staylecrate]

Amazing video! Thank you so much. I was hung up when configuring my VPN. That check box you did in the network policy error solved my issue. I watched the whole video start to finish anyway and just love the speed you went through it all with. It really erks me when people over-narrate or get side tracked talking about something else. This was quick, concise, and to the point. Thanks again!

[@MSFTWebCast]

Thank You.

[@Staylecrate]

@@MSFTWebCast do you know if Microsoft ever fixed the 2019 server update bug that stopped RRAS from working?

[@OmegaKatanaXIII]

Thank you for breaking this process down to the point I can easily follow along with the steps.

[@samfalcon8496]

I really love the way teaching and explaining

[@imthi007]

Very Impressed , I have tried so many ways VPN not work. but this single Video made my day... Many thanks indeed

[@MSFTWebCast]

Glad to hear that

[@imthi007]

@@MSFTWebCast I need one more favour not able to ping my server ip or not able to access my share folder. Ex. My vpn ip is 10.0.0.103 and my server is 10.0.0.100

[@MSFTWebCast]

Please check firewall settings, open required ports for ICMP and File and Printer Sharing Service.

[@yogeshvyas605]

Nice video, Base on ur video I have implemented RAS server in my infra. Thank you so much.

[@MSFTWebCast]

Great 👍

[@super_straight]

You are awesome! Many thanks for the clearly explained tutorial. It saved me so much pain and time!!!!🏅

[@MSFTWebCast]

Glad it helped!

[@SunilBaniyal]

After Doing this process can i take my office computer remote from home using Remote Desktop Connection?

[@violetmakwakwa3060]

thank you, the video was very helpful..

[@roelhr]

Excellent video! Subscribed. Thank you.

[@MSFTWebCast]

Thanks for the sub!

[@danielmaricelmunteanu5059]

Thanks, punctual and precise, in what regards the client to client routing through the vpn ..?

[@TheRaaju007]

Very good explanation.

[@khairisyafi5005]

what if i use mobile hotspot? can i use my phone for port forwarding?

[@obaidullahnoor8604]

Great sir!!

[@MuhammadWaqas-gr4gg]

whats the difference between your PPTP VPN vs "Remote access VPN??? i am not clear

[@alexmironescu8797]

Hi, I hope this post finds you well, your tutorial is brilliant, I managed to set up the vpn, I can connect to the server from another pc but only if it's on the local network, I did all the steps you did but without success.Could you help me? I mention that the domain used is hosted as a website. I get this error when I try to connect from a pc on another network: “The network connection between your computer and the VPN server was interrupted. This can be caused by a problem in the VPN transmission and is commonly the result of internet latency or simply that your VPN server has reached capacity. Please try to reconnect to the VPN server. If this problem persists, contact the VPN administrator and analyze quality of network connectivity.” Help me, please

[@mavicmaster]

Hello, Hope you are doing well. Can this be accessible from outside network? If not, what do i need to do to connect from outside network? Thanks.

[@mavicmaster]

It's works.

[@Checc1]

I'm getting the following: "Windows cannot process the object with the name "TestUsers" because of the following error: The specified domain either does not exist or could not be contacted. Any idea how to fix this

[@hamzabeniffou9324]

Hello, I would like to know how can I setup in order to access to my vCenter Server remotely ? is it possible to do it like this way ? do you have a video on this please? thanks

[@DytliefMoller]

very entertaining, good info too

[@hameedullah3355]

Sir would u like to record tutorials on vpn suppose if an organisation has only single server in Headd office, and they have network router and switching in 4 sub offices . How they will use the resources from remote end . Kindy expalin it.

[@samuelessel5366]

Hello thanks for the lessons. I want to connect my laptop to my dicom server at work.. pls help

[@niccite]

Excellent Tutorial - Thank You!

[@MSFTWebCast]

Glad it was helpful!

[@krzemyk84]

Great tutorial! Thank you so much for your help and keep up the good job :)

[@quaryum1208]

Hi, How can we do multiple authentication to protect hi vpn? Do you have a video about this?

[@visionshahi8196]

Hey I loved your all videos.. Can you make a video through which we can use remote access vpn to secure remote desktop connection. You just show how we can install and connect it but if you show how we can use it to secure the services. It will be great. Just tried but failed because the remote desktop services have rd gateway and NPS installed. With NPS we have to configure VPN for RD gateway. I tried to add IP VPN static port range as IP scope in firewall for TCP port 3389. But when client computer is connected with VPN the Public IP was not changing, than i read few articles online and found the issue which was "enable remote default gateway server" in VPN connection. But when i enable this internet will not work. I didnt found any video which show proper use of remote access vpn to secure Remote desktop connection and other services. Please can you make one video on this. One of your big subscriber

[@remotedesktop-q1g]

thak you very much sir. but how do i do this on vmware without router. I don;t have router please reply sir

[@wotizit]

SHUKRIA

[@nellbeatsdallas]

Love the videos, How do I set up to where users use fingerprint scanner to access vpn? (Multi-Factor Authentication)

[@jeffb1328]

When I click on Dial in properties on a user I get the error message: "Could not load the Dial-in profile for this user because: The network path was not found", any idea why?

[@muhammedfahim8168]

great job

[@hv3300]

Great video. At 13.22 user you created in test group is different from what you have used -Any thoughts?

[@MSFTWebCast]

Yes, the user is same. The User display name is Test User1 and login name is User1 (UPN: [e-mail]). Sorry for the confusion.

[@hv3300]

@@MSFTWebCast Gotcha. Thank you for the clarification.

[@AvtarSingh-jw3xs]

Hi, it's a very helpful video. Please let me know how I connect my Server to use any application remotely using VPN. Like Using RDP, i can connect server remotely through static IP. Please help

[@bruhcsp]

Good, but you ignored that some people don’t have the Active Directory configured.

[@boytongo]

Can you please name which is the most secure protocol when using vpn. Thank you so much

[@minhtempe]

Thanks for sharing very helpful video. I followed all steps and I can connected to server but I cannot access any files or ping to server. What do I need more? Please help

[@Giancarlo_Sforza]

Did you have to publish any DNS records in Cloudflare or other DNS registrar or is port forwarding just enough for this to work? My question is, how is the remote windows10 client able to locate the windows vpn server via the internet? I suppose port forwarding takes care of that

[@MSFTWebCast]

if you want to connect your VPN server using FQDN (name like website address) then DNS registration is required otherwise you can use the static public IP address to connect to your VPN server.

[@Giancarlo_Sforza]

@@MSFTWebCast Thank you for the reply, this is very helpful. It seems like on this video you are using the PPTP protocol which is not very safe nowadays hence I am trying to get IKEv2 to work. I found the video very helpful though and made me understand the whole concept a lot better. I was working on setting up an IKEv2 Always On VPN with device certificate issued by my on-prem Cert Authority windows server (not signed by digicert or any other CA). I didn't have much luck so far but I am on good track I just need to enroll a physical laptop to my domain so i can get the device certificate to that laptop or find another way of moving the certificate to a laptop that is not domain joined. I was looking to find a video of yours setting up VPN with the IKEv2 protocol, is there one?

[@AndrewSmith-wf3mf]

Well Done!!!

[@denishagohil4987]

Using this method I can't establish the VPN connection in different network.I face the error.

[@agboolamatthew]

Please I need help. I have been trying to follow your video. Got stuck around step 4. Is there any need to create a special user applied on a group or a normal user can just be used.

[@MSFTWebCast]

Normal user will do the job. Follow the same steps and check everything. If already you have created the NPS policy, you can delete it and restart the NPS service and recreate again.

[@niteshsantoki]

Hello Sis, After folowing your steps, I still Cant be able to connect over public IP address, It is displaying an error in YELLOW TEXT - " The network connection between your computer and the VPN server was interrupted. This can be caused by a problem in the VPN transmission and is commonly the result of internet latency or simply that your VPN server has reached capacity. Please try to reconnect to the VPN server. If this problem persists, contact the VPN administrator and analyze quality of network connectivity." - I'm not sure what im doing wrong. Please Help. Thank you so much.

[@chimmajhulewala9522]

Great, Thanks

[@alimuratgoral2370]

Excellent video. Thank you 👍

[@MSFTWebCast]

Thank you too!

[@riccardolaporta7746]

Thanks so much ❤

[@parthpardeshi62]

I'm having an issue.... The vpn is connected from another network it's not showing the shared files, however when it is connected from my office network, the I can see the files.... Please help I've been trying since one month 🥲

[@Izzy25]

Does client computer need to be on the same domain? Ex. If user is using personal laptop or iPhone can they still connect? The user itself would be a domain user but the devices wouldn’t be on the domain.

[@MSFTWebCast]

Yes they can connect.

[@parthpardeshi62]

Hi.. I've set up the vpn as per your steps but I'm getting vpn error 806.. I've tried imbounding policy for 1723 port and also ported my router. Still I'm getting that error

[@asriishak4881]

why my server doesn't have 'active directory users & group'?

[@mauriziopersi401]

It is a DC?

[@CarlMakesItEasy]

upgrade to a domain controller through Add roles and features and Active Directory Domain Services

[@netitfish]

Routing and Remote Access service has not started The specified file cannot be found. Can you help me to resolve this problem? thank you.

[@SachinKumar-il2yy]

How we can contact you for further assistance

[@micheledimauro1282]

with this kind of Vpn i can successfully connect and ping each ip address in the remote vpn site, but can't reach resources by hostname, any suggest??

[@samliang4146]

why can;t i open my router setting page when i type in the default gateway address of my nit, i tried both NAT and lan segment, neither of them can open router page. why

[@MSFTWebCast]

Ask your network administrator, Might be he/she can help with that.

[@jg6111]

A good video. Please include a logical diagram too for better understanding. Thank You.

[@MSFTWebCast]

Noted..

[@boytongo]

Very well explained

[@anilahuja3679]

Using this video I was able to create the VPN connection and tested it out. I can't see the Remote Server in my Network on the Client PC and can't map a network drive from the Server either. What am I missing?

[@yogeshvyas605]

Try to map drive with fully fqdn name

[@digimation6862]

Remember in the cliente pc enable File AND Share Folder to allow communication of the pc AND the server

[@christiangutang6189]

How were you able to access your router? Because when I tried to put my virtual machine's default gateway in the browser, it said that it can't reach the page.

[@MSFTWebCast]

You have to select bridge adapter mode for VirtualBox adapter. Make sure that the IP address is in same range as your router.

[@JohnPaulCorrea-i9t]

hi, does this work if I dont have static public IP? if not what are the other way to do this?

[@MSFTWebCast]

With dynamic IP address on VPN server, you can use dynamic DNS service provider for VPN connection. There are several dynamic DNS provider which provide dynamic IP address to easy to remember hostname (Dyn DNS or no-ip). Using this static hostname, client can connect to your VPN server. They will automatically update the dynamic IP address in their DNS server to connect hostname to updated dynamic IP address if your dynamic IP address changed.

[@schiet100]

Thank you!!!

[@Archon_Dude69]

If the Client Machine In Work From Home, Is Client Machine Can Connect VPN With his/her Home internet Connection?

[@MSFTWebCast]

Yes, it can.

[@moehans9833]

can we install this on and active directory server as we only have one server

[@MSFTWebCast]

Yes, you can but from security point of view it will be risky.

[@williamm200]

Windows making easy to setup

[@MohammedESeno]

Hello.. how can I contact you?

[@mattdent6565]

Very helpful - thanks!

[@johnnykerbaj4840]

Thanks a lot

[@MSFTWebCast]

Thank You too.

[@BunjackThuok]

Brilliant thanks dear

[@MSFTWebCast]

Thank you too

[@Digitalrozgarmission]

the network connection between your computer and the vpn server was interrupted this can be caused by a problem in the vpn tansmission and is commonly the result of internet. getting this error

[@jestercagzreynales7611]

same can anyone pls help

[@AndrewSmith-wf3mf]

Perfect

[@zefur321]

my server is not Active Directory server. Can I enable VPN ?

[@MSFTWebCast]

You can install Remote Access Server role without AD and setup a server to act as a VPN server. You just need to create user accounts from computer management and assign dial-in permission.

[@20006raghu]

I need your help I'm unable to connect remote acces

[@MSFTWebCast]

What kind of error you are receiving?

[@skeemyweenus4995]

Question for 4:09 . So If you're specifying 10 ip addresses, would that mean that there can only be 10 users using VPN at the same time? If yes, then how can make it so that it can fit (for example) 1,000 users? If that is possible.

[@MSFTWebCast]

You need to use bigger subnet with 1000 IPs.

[@tennisball2012]

Crazy good video

[@MSFTWebCast]

Glad you think so!

[@victorgarcia-sz7vh]

Thank you for the video

[@MSFTWebCast]

Welcome!

[@xyztamilan]

HI I am connected to vpn but unable to ping the server or access the server. Any idea how to fix it

[@MSFTWebCast]

Configure the dial-up connection properties with DNS servers address. You can also configure static routes to connect to the other local network using VPN.

[@AndrewSmith-wf3mf]

Thank U

[@DerrickThomas17]

Hey great video. I came across your channel and it's fabulous. Question, everything works great when I test the vpn internally, when external, it connects but cannot ping the file server via IP or name. What am I missing? Thank you and I also subbed to your channel. Keep those great videos coming.

[@MSFTWebCast]

Check firewall rule settings on VPN Server and also the IP configuration settings. Might be IP routing related issue.

[@MSFTWebCast]

And thank you for sub.

[@DerrickThomas17]

@@MSFTWebCast I still cannot browse from the outside. Any ideas?

[@sjnlim3925]

do we need static public ip in this config ?

[@MSFTWebCast]

Yes, on VPN servers internet facing interface.

[@babatundeadeyemi2800]

Thanks for this video, its very useful. However, i noticed that once i restart the server, all configuration would go back to default. Is there any way i could keep the configuration permanent. Thnks

[@kelkloud24]

not usually recommended, but you can use deepfreeze

[@headara4372]

after use vpn what's happen on computer client didn't have internet !

[@MSFTWebCast]

The use of VPN is to provide secure communication over Internet while connecting to Office network from Public Network. If there is no internet then this will not work.

[@CharcoalProduction]

Why we are not using MSCHAPv2?

[@MSFTWebCast]

MS-CHAPv2 is an old authentication protocol. EAP with MS CHAPv2 is more secure and common form or PEAP.

[@sanampreet9878]

But without network policy configuration it is working It is compulsory to configure network policy

[@MSFTWebCast]

If you dont have NPS server, you can grant allow access to dial in in user account property to use VPN without network policy. If you have NPS server then you can setup the NPS policy as per your company requirement, it is not compulsory.

[@kgerakopoulos]

Can I use this remote to connect outside of local lan? And is it safe from hackers ?

[@MSFTWebCast]

Yes, you can use VPN to connect your local LAN over the Internet. Yes, it is safe.

[@hubertpowell340]

The problem I am having is I can connect to the VPN server from inside my network, but if I try to connect from an external network, I get the message, The remote connection was denied because the user name and password combination you provided is not recognized, or the selected authentication protocol is not permitted on the remote access server.

[@UndergroundCarGuys]

Could be due to the Domain, you may need to put the @[Domain Name] After the username.

[@mdrashidhussain7168]

This is virtual machine...????

[@MSFTWebCast]

Yes. entire demo is in virtualbox VM.

[@numanahmad4471]

When i try to connect it says “A connection remote computer can not be established. So the port used for this connection was closed “

[@MSFTWebCast]

Have you opened the required ports in your router or firewall?

[@anis5709]

I got this error msg on 7:45 "Windows cannot proces the object with the name TestUsers: The specified domain either does not exist or could not be contacted" can u help me pls?

[@MSFTWebCast]

On Find Now, window can you see your group? Make sure you have used the domain admin or equivalent credential to logon to that server. NPS server must be registered in Active Directory.

[@anis5709]

@@MSFTWebCast the server dosent had a domain. That was the Problem. I created one :). Im by Step 5 and i dont have the access to the router because the server is hosted online by a provider. Any solution or idea? Thx for ur answer :)

[@MSFTWebCast]

@@anis5709 If your server is not part of AD then you can use create Users or Groups on local Server and use it in VPN authentication.

[@armandadvar6462]

I have error on installation process.

[@MSFTWebCast]

What kind of error? Any message?

[@sagarrajput335]

i am getting a error "the connection was prevented because of a policy configured on rsa/vpn server. "

[@dhilipkumar9784]

Sir what to give in user name and password, you gave Msdwebcast? Pls reply sir

[@dhilipkumar9784]

While accessing router it asks for user name and password

[@MSFTWebCast]

If you have not set up the password no your router then use the default username password. Based on your routers model, you can find the default username and password on Internet.

[@Ranjeetkumar-fj4kp]

nice..

[@shifa7474]

window server 2019 routing and Remote access not starting

[@MSFTWebCast]

Any specific errors that you are getting while starting the service?

[@shifa7474]

@@MSFTWebCast the system can't find the file specified..

[@MSFTWebCast]

@@shifa7474 Can you please check the event viewer for any error or warning related to VPN/Routing and remote access.

[@MarloMitchell]

The accent is adorable.

[@naifhomood4309]

What if i don’t have a router how can i select pptp port ?

[@naifhomood4309]

I broadcasting the internet from my iPhone to virtual machine

[@akkayalarnserdar3184]

i cant found bloody "active directory users and computers" on my god damn pc

[@MSFTWebCast]

Is it domain controller? If not then you can also use local users and group.

[@akkayalarnserdar3184]

@@MSFTWebCast im sorry about behaving angry, thank you for answer,

[@muthukannannatarajan747]

Only vpn is working

[@shyamsundermayengbam3221]

Let's make soft!

[@ahmedsaad-lk2og]

ok

[@Benmaluco9]

PPTP = Insecure