Error Message Is Displayed When Setting Up a Virtual Private Network on Windows 2000 in a Windows NT 4.0 Domain (260027)

SYMPTOMS

When you use Microsoft Windows 2000 Server in a Microsoft Windows NT 4.0 domain, and the Active Directory utility is not installed, you may receive the following error message when you try to set up a remote access server (RAS) or Virtual Private Networking (VPN) server through the Routing and Remote Access Setup Wizard:

Windows was unable to add this computer to the list of valid remote access servers in the Active Directory. Before you can use this server as a remote access server, you need to have domain administrators add this server to the list.

CAUSE

This error message occurs on any Windows 2000 Routing and Remote Access Service (RRAS) server that is a member of a Windows NT 4.0 domain because the Routing and Remote Access Setup Wizard tries to add this server to the "RAS and IAS Servers" group in Active Directory. However, that group does not exist and is not needed in Windows NT 4.0 domains.

RESOLUTION

You can ignore this message when it occurs in a Windows NT 4.0 domain; the server should still function correctly. When the domain is moved to the Active Directory, the RRAS server is added to the "RAS and IAS Servers" group.