Share via

Event ID 20191 — RRAS Authentication and Accounting

  • Article

Applies To: Windows Server 2008

If a remote access server is configured for Windows authentication, the security features of Windows Server 2008 are used to verify the credentials for authentication, and the dial-in properties of the user account are used to authorize the connection.

If the remote access server is configured for RADIUS authentication, the connection request, including credentials, is forwarded to the RADIUS server for authentication and authorization. If the RADIUS server is a computer running Network Policy Server (NPS), NPS performs authentication against the credentials that are stored in the user account database, such as Active Directory Domain Services (AD DS) or the local Security Accounts Manager (SAM) database on the server running NPS. NPS performs authorization using the dial-in properties of the user account and with network policies that are configured in NPS.

Event Details

Product: Windows Operating System
ID: 20191
Source: RemoteAccess
Version: 6.0
Symbolic Name: ROUTERLOG_EAP_TLS_CERT_NOT_FOUND
Message: Because the certificate that was configured for clients dialing in with EAP-TLS was not found, a default certificate is being sent to user: %1. Go to the user's remote access policy and configure the Extensible Authentication Protocol (EAP).

Resolve

Configure network policy for EAP

In Windows Server 2008, network policy is managed through Network Policy Server (NPS). For information about creating and configuring network policies, see "Checklist: Configure NPS for Dial-up and VPN Access," "Create Policies for Dial-Up or VPN with a Wizard," and "EAP Overview" in Windows Server 2008 NPS Help.

Verify

To verify that the remote access server can accept connections, establish a remote access connection from a client computer.

To create a VPN connection:

  1. Click Start, and then click Control Panel.
  2. Click Network and Internet, click Network and Sharing Center, and then click Set up a connection or network.
  3. Click Connect to a workplace, and then click Next.
  4. Complete the steps in the Connect to a Workplace wizard.

To connect to a remote access server:

  1. In Network and Sharing Center, click Manage network connections.
  2. Double-click the VPN connection, and then click Connect.
  3. Verify that the connection was established successfully.

RRAS Authentication and Accounting

Routing and Remote Access Service Infrastructure