RAS Administration DLL - Useful on ISA Server?
I don’t know if many ISA server guys and girls also read the Routing and Remote Access Blog but, because ISA makes extensively use of the Windows RAS features for the VPN stuff, it might be useful to follow that one too.
Lately there was a two part blog about the RAS Administration DLL:
- RAS Administration DLL - Your customized solution to manage the server!
- Steps to develop a RAS administration DLL using Visual Studio
In my humble opinion, one of the applications of the RAS Administration DLL could be to implement a control on the ISA server such that only one VPN connection could be made to an ISA server using a single user name. This is basically to prevent users from distributing their usernames and hence resulting in lot of connections with the same username. I think this is a much asked feature.
Maybe some ISA folks with some software development skills can build and test such a control for the ISA server community. 
HTH,
Stefaan
Tarek Majdalani Says:
January 18th, 2008 at 2:01 pm
Hi Stefaan,
I usually use this utility : LimitLogin utility
read more here : http://support.microsoft.com/kb/237282/en-us
one of its features : It can limit the number of logins for each user from any computer in the domain. This includes terminal server sessions.
Thanks,
Tarek
stefan Says:
March 1st, 2008 at 8:06 am
Hi stefaan
i have a interesting question about the article ‘’How to work around an issue with VPN clients and split DNS. (Published: Jan 26, 2006).'’ in my case the following strange thing is happening. i hope you have a clue or idea.
I have a vpn connection with my work and also mentioned in your article it seems like my dns is not working because it takes the dns from my internet provider instead of the dns for the vpn. i tried the KBQ311218 article from M. but it didn’t work
my example:
———————————————————————————————-
Windows IP Configuration
Host Name . . . . . . . . . . . . : Xmachine
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
Ethernet adapter Local Area Connection 3:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : NVIDIA nForce Networking Controlle
Physical Address. . . . . . . . . : 00-14-85-2E-88-2B
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.102
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.2
DNS Servers . . . . . . . . . . . : 10.50.1.1
217.149.196.6
217.149.192.2
10.50.1.2
NetBIOS over Tcpip. . . . . . . . : Disabled
Ethernet adapter VPN connectie:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Cisco Systems VPN Adapter
Physical Address. . . . . . . . . : 00-05-9A-3C-78-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.50.10.10
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 10.50.1.1
10.50.1.2
NetBIOS over Tcpip. . . . . . . . : Disabled
C:\>nslookup
Default Server: resolve10.dns.internl.net
Address: 217.149.196.6
> devcomputer
Server: resolve10.dns.internl.net
Address: 217.149.196.6
*** resolve10.dns.internl.net can’t find devcomputer: Non-existent domain
>
———————————————————————————————-
as you can see in the top. i have mentioned the dns from my work (10.x.x.x range) in the tcp/ip settings of my internet connection (eth 3). i connect through an open router(linksys) (with all the dns names included) . this router is fully well configured.
When i am connected with vpn, i tried to lookup the computer ‘’devcomputer'’ because i know it exists on my work in the range (10.x.x.x). But it uses the wrong dns server. instead of a dns 10.x.x.x server it uses my internet dns.(217.x.x.x) when trying to connect on a dns name with for example a remote connection
when i do a ‘ping’ with the ipadresses (10.x.x.x) then it gives me an answer. when i ping with the name the computer is not known.
Dou you have a method to explictly use a dns server (maybe forced to one dns server) when using a vpn connection? in the tcp/ip settings the dns settings are already placed on (10.X..x.x) but it looks like it dont use them.
good articles on your site btw
greetz
Stefan
Stefaan Pouseele Says:
March 1st, 2008 at 12:10 pm
Hi Stefan,
check out the thread http://forums.isaserver.org/m_2002004268/tm.htm belonging to my article http://www.isaserver.org/tutorials/work-around-VPN...S.html.
HTH,
Stefaan