Skip navigation

JSI Tip 3150. PPTP clients can NOT connect to a Windows 2000 PPTP server?

Windows NT, Windows 2000, and Windows 9x clients that try to establish a PPTP session with a Windows 2000 PPTP server receive:

Error 649
Login failed: username, password, or domain was incorrect.
At the same time, the server's event log receives:
Event ID 20078
The account for user <username> connected on port VPN3-127 does not have Remote Access privilege.
The line has been disconnected.

Event ID 20189
The user <username> connected from x.x.x.x but failed an authentication attempt due to the following reason:
The user tried to connect using an unauthorized dial-in media.
To fix this problem:

1. Start the Routing and Remote Access administrative tool.

2. Expand the options under your Remote Access Service (RAS) server's name.

3. Press Remote Access Policies, right-click, and press Properties on Allow access if dial-in permission is enabled.

4. Press Edit Profile.

5. On the Dial-in Constraints tab, do one of the following:

Clear the Restrict Dial-in Media option.


Select Restrict Dial-in Media, and then select Ethernet and VPN from the list of options available.
6. Press Apply.

7. Press OK.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.