toms

I have set up a vpn server using win2003. I would like to
authenticate users using IPSec but without a certificate
or pre shared key. Is this possible?
I got it working using a pre shared key and pptp works
fine, however I would like to deploy to remote users, all
using windows XP Pro on their laptops. I don't want them
to deal with certificates or pre shared keys but would
like to use ipsec instead of pptp.
When I try to connect I get the following error. "Error
781: The connection requires a certificate, and no valid
certificate was found."
It looks like the client has this requirement as I have
tried to connect with the laptop disconnected from the
network and I get the same error. Any help is appriciated

david beder [msft]

Preshared key and Certs are your only options.
I'd consider rolling out a customized vpn package created using the
Connection Manager Admin Kit in win2k3. There should be some relavent
do***entation for l2tp/ipsec deployment in the online help as well as
http://www.microsoft.com/vpn.

--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no rights.