26. How to configure SSTP VPN on Windows Server 2019

[@lstanford23]

Man, your videos are really really good! So informative and the step by step is perfect. Thanks so much!

[@Martin-ot7xj]

Hi there at 03:09 you selected certification Authority from the tools option in my windows server i don't have certification Authority how can i install it ? thnx

[@Martin-ot7xj]

Hi, why you didn't select the NAT option at 10:47 ???thnx

[@MSFTWebCast]

Generally we select that option, in my test environment I just want to show the steps without NATING.

[@nickjiang4459]

I do the same as what you did however I cannot Ping the VPN server internal network. My client PC is assigned 10 subnet from VPN server but cannot ping to VPN LAN. Do you know what is going on? Much appreciated.

[@Martin-ot7xj]

Hi there, please make a tutorial video about how to install and configure sstp VPN server 2019 in a Non-Domain Environment. install in standalone windows server 2019 (workgroup ) thnx

[@Martin-ot7xj]

Hi there, with this configuration we have internet + VPN +NAT with sstp protocol right ???? thnx

[@MSFTWebCast]

Yes, dont forget to select NAT option.

[@alwu5071]

Great video as always. Troubleshooting related question: Ran into "The cert's CN name does not match the passed value" at testing client connection. had checked the names but dont seem to be able to shake this off. any tips please. Thanks

[@MSFTWebCast]

The name on certificate and the name you used to connect is not matching with the names in SSTP certificate. Check the certificate thumbprint and Subject alternative name on VPN server and match with Certificate settings in Routing and Remote Access Management. On that console select Properties - Security. Check the certificate section.

[@muftieq2664]

when i click on connect after i set up VPN on my client, it say that the host is unknow

[@mrtau6279]

Should this work from a different location? that is different Network different internet connection? or should I change VPN Server name (ip address) to external ip? could you demonstrate how to do this plz.

[@sergeant_dornan_]

Yep, either I am not getting something, or this scenario is very weird - a computer, that already is located inside the network and is a part of AD, is establishing connection to the VPN server in the same network. I thought VPN was supposed to allow external machines to securely connect to enterprise network? Otherwise this seems useless. I can already see that external machine will just spit out error in the realms of "couldn't find your VPN server domain name", because it will be located in another network.

[@gujranwala2001]

@@sergeant_dornan_ This is for training purposes on how to set up VPN on Windows server. In real world your member server will be on the edge of the network and connected to internet.

[@marvinsolon5071]

Hi @MSFT Webcast, You're contents was very useful. One question though, may I know if you have tried connecting from another Windows Server 2019 to your server using your SSTP dialler?

[@mt-nu6lj]

amazing thanks !!

[@kamaljeetsingh3778]

Excellent Sir !!!

[@ittec4u]

Thanks Man you mad my day, by this step, I have configured SSTP VPN, and it is working in Windows, but there is problem in Mac os, May I know how to Disable revocation check in Mac OS

[@joaodimasribeiro8815]

Hi. This is an example of a very useful guide. However, I am a beginner and I was not able to duplicate the certificate model, since even when logged in as an administrator, an access denied message appeared when trying to duplicate the IPSec model. Can someone help me? I use Windows Server 2019.

[@MattSaundersMCP]

Thanks so much your video are helping learn alot :)

[@MSFTWebCast]

Glad that it helps..

[@MattSaundersMCP]

@@MSFTWebCast Can you make some videos on how Active Directory replication works between DCs / troubleshooting AD replication issues using server 2019?

[@MSFTWebCast]

@@MattSaundersMCP Please look for "Managing Active Directory in server 2019" Playlist.

[@ThePunish3r77]

The connection was prevented because of a policy configured on your RAS/VPN server - I have this error when try to connect the client

[@MSFTWebCast]

Might be issue with NPS policy. Have you follow the same steps or you have different setup?

[@nishantrathee1506]

Excellent videos for Windows Server Configuration. Can you please make a video for VPN authentication using smart card

[@johnbenson222]

I get error on Windows 10 VPN "a certificate chain processed but terminated in a root certificate which is not trusted by the trust provider. What did I miss? Thanks for your excellent videos.

[@MSFTWebCast]

That means, the issuer of the certificate is not trusted root CA. You need to import the CA certificate to trusted root CA. In video starts from 17:50.

[@josebello61]

I am having the same problem. The Cerifiicate is in the "trusted root CA" of the client.

[@ahmedsaad-lk2og]

thanks

[@WintersNumbingCold]

Спасибо, очень помогло, my indian сенсей

[@MSFTWebCast]

Благодарю!

[@IanGSully]

Here is a tip for people that are Active Directory (AD) noobs, don't ever use Windows Server 2019 for AD, because I have had issues with Windows Server 2019 AD, use Windows Server 2016 AD, it is better, even know that Windows Server 2019 AD uses the same protocols as Windows Server 2016 AD.

[@МенеТекел]

Бла бла бла бла, сказала чето там докажет и конечно же ничего не доказала.