Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

HOW TO: Change the default domain that is used by the Routing and Remote Access Service or by IAS to authenticate users


View products that this article applies to.

Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986 (http://support.microsoft.com/kb/256986/ ) Description of the Microsoft Windows Registry

↑ Back to the top


Summary

This article describes how to change the default domain that is used by the Routing and Remote Access service or by Internet Authentication Service (IAS) to authenticate users.

Mostly, users log on to computers that are running Microsoft Windows 2000 or Microsoft Windows Server 2003 by using a dial-up connection or by using a virtual private network (VPN) connection. Users use a user name, a password, and a domain name when they log on. Windows 2000-based computers and Windows Server 2003-based computers that run Routing and Remote Access or IAS may not be able to authenticate users if they omit one or more of these credentials. By default, if a user does not specify a domain name, Routing and Remote Access and IAS try to authenticate user accounts against the domain that the server belongs to.

↑ Back to the top


More information

Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

You can change the default domain by modifying a registry key on the server that is running Routing and Remote Access or IAS. To do so, follow these steps:
  1. Click Start, and then click Run.
  2. In the Open box, type regedit, and then click OK.
  3. Locate and then click the following registry key:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RASMAN\PPP\ControlProtocols\BuiltIn
  4. In the right pane, right-click the DefaultDomain registry key, and then click Modify.
  5. In the Value data box, type RRAS or IAS, and then click OK.
Note By default, Routing and Remote Access or IAS can authenticate local user accounts on the server where they run. To turn on this authentication, follow these steps, but in step 5, type the computer name for the server that is running Routing and Remote Access or IAS instead of RRAS or IAS.

↑ Back to the top


Keywords: KB826158, kbhowto, kbrouting, kbregistry

↑ Back to the top

Article Info
Article ID : 826158
Revision : 3
Created on : 10/30/2006
Published on : 10/30/2006
Exists online : False
Views : 291