For the past 6 months I have been periodically receiving an error connecting to one of our VPN servers of:
Error 812: The connection was prevented because of a policy configured on your RAS/VPN server. Specifically, the authentication method used by the server to verify your username and password may not match the authentication method configured in your connection profile. Please contact the Administrator of the RAS server and notify them of this error.
This error occured on both Windows 7 and Window 8 workstations, but only periodically, and most frequently after a disconnect has occurred and the user is trying to reconnect to the VPN. Sometimes starting and stopping RRAS on the server will resolve the issue, sometimes rebooting the RRAS server will resolve it, and other times simply trying again an hour later will result in success. I did some searching on the Internet, but virtually all of the resolutions for this issue are related to setup or configuration problems that would result in the VPN either consistently working or not-working for a specific workstation, not a random occurrence of this error. I tried changing a number of the NPS policies, since the error seemed to point to an NPS issue, but this did not resolve the problem.
Eventually I was able to isolate the issue to a periodic problem with the RRAS server not being able to connect to the Active Directory server for account authentication. One of the reason codes occasionally generated in the security event log was:
The Network Policy Server was unable to connect to a domain controller in the domain where the account is located. Because of this, authentication and authorization for the RADIUS request could not be performed.
The cause of the problem ended up being very simple: The primary DNS of the RRAS server was no longer pointing at the domain controller. Changing the primary DNS to the domain controller and setting the secondary DNS to an external server (the primary google 8.8.8.8 DNS in this case) eliminated the issue.
In case you are having error 812 problems consistently here are some additional links on other common configuration issues:
Thank You for the tip.
although this method did not work for me.
i deleted the RADIUS Client in the NPS server and deleted the NPS RADIUS server in the Radius client and re-tried and it worked. I’m using MS Routing and Remote Access as a Radius Client.
Thanks
Setting the primary DNS of the VPN to the one of AD server and secondary DNS to an external one, solved the problem for me. Thank you a lot!
You shouldn’t set the secondary DNS server to anything other than another Internal DNS server.
You should use forwarders or Root Hints to find things outside of your network.
It could also be a user attribute in AD.
Dial-in should be set to Allow.
Look at this:
http://www.passionateaboutit.net/KnowledgeBase/tabid/113/EntryId/19/trouble-shooting-error-812-the-connection-was-prevented-because-of-a-policy-configuration-on-your-ras-vpn-server.aspx
Andreas – that Dial in AD attribute set to “allow” was my issue, thank you!
I’m having the same problem. So far everything i’ve tried has failed. This contains:
1. Setting the user to dial In as allowed
2. Setting the network policies to allow VPN connections
3. Changing the raidus client policy to allow connection through remote Desktop.
I had reslove it by read this https://itday.com/vpn/best-vpn-services-of-2017/
Thank you, this was driving me crazy!!!
Thank you for your post! Helped me out!
Thank you!