Hi Vista gurus,

I have VPN using RRAS against a Windows 2003 server. The client installs
with no problems on Vista Ultimate RTM. When I click connect I get an
message box. listed below. This same works on WinXP Pro and Windows 2003
SP1.

1) "Connection manager needs elevated privilege to run the following Custom
Action(s) to proceed with the connection"
CMROUTE.DLL - to update you routing table.

2) When I click "Continue"

3) An error comes up with "Connect Action to update your routing table
failed (80070002)"

I turned off UAC and rebooted the Vista client. I looked in the Local
security policy and didn't see anything, I ran filemon and didn't see
anything being denied. I turned on auditing, nothing inthe Security log. I
found a few errors in the application log. "The reason code returned on
termination is 631" Any ideas?



TIA,

Steve Schofield
Microsoft MVP - IIS.

Have they come out with a CMAK for Vista yet?

--
Josh
http://windowsconnected.com

Now with NNTP goodness!
"Steve Schofield" <steve@deviq.com> wrote in message
news:OE1eHzDDHHA.3928@TK2MSFTNGP03.phx.gbl...
> Hi Vista gurus,
>
> I have VPN using RRAS against a Windows 2003 server. The client installs
> with no problems on Vista Ultimate RTM. When I click connect I get an
> message box. listed below. This same works on WinXP Pro and Windows 2003
> SP1.
>
> 1) "Connection manager needs elevated privilege to run the following
> Custom Action(s) to proceed with the connection"
> CMROUTE.DLL - to update you routing table.
>
> 2) When I click "Continue"
>
> 3) An error comes up with "Connect Action to update your routing table
> failed (80070002)"
>
> I turned off UAC and rebooted the Vista client. I looked in the Local
> security policy and didn't see anything, I ran filemon and didn't see
> anything being denied. I turned on auditing, nothing inthe Security log.
> I found a few errors in the application log. "The reason code returned on
> termination is 631" Any ideas?
>
> TIA,
>
> Steve Schofield
> Microsoft MVP - IIS.

This was an existing VPN package developed with CMAK on Windows 2003. The
odd thing it works on my laptop running vista RTM. Both my desktop (which
doesn't work) and my laptop (which does) are on the same home network
connecting outbound. I'll keep after it.

Tx,

Steve

"Josh" <josh@nospammers-windowsconnected.com> wrote in message
news:9EE0AF14-A299-4D9F-9FED-4ABA7AAE2E0A@microsoft.com...
> Have they come out with a CMAK for Vista yet?
>
> --
> Josh
> http://windowsconnected.com
>
> Now with NNTP goodness!
> "Steve Schofield" <steve@deviq.com> wrote in message
> news:OE1eHzDDHHA.3928@TK2MSFTNGP03.phx.gbl...
>> Hi Vista gurus,
>>
>> I have VPN using RRAS against a Windows 2003 server. The client installs
>> with no problems on Vista Ultimate RTM. When I click connect I get an
>> message box. listed below. This same works on WinXP Pro and Windows 2003
>> SP1.
>>
>> 1) "Connection manager needs elevated privilege to run the following
>> Custom Action(s) to proceed with the connection"
>> CMROUTE.DLL - to update you routing table.
>>
>> 2) When I click "Continue"
>>
>> 3) An error comes up with "Connect Action to update your routing table
>> failed (80070002)"
>>
>> I turned off UAC and rebooted the Vista client. I looked in the Local
>> security policy and didn't see anything, I ran filemon and didn't see
>> anything being denied. I turned on auditing, nothing inthe Security log.
>> I found a few errors in the application log. "The reason code returned
>> on termination is 631" Any ideas?
>>
>> TIA,
>>
>> Steve Schofield
>> Microsoft MVP - IIS.
>

hmmm...

Do you have apps that are on your desktop that might impact the network
layer? other VPN clients, winsock, something like that?


--
Josh
http://windowsconnected.com

Now with NNTP goodness!
"Steve Schofield" <steve@deviq.com> wrote in message
news:%2340wELEDHHA.1012@TK2MSFTNGP04.phx.gbl...
> This was an existing VPN package developed with CMAK on Windows 2003. The
> odd thing it works on my laptop running vista RTM. Both my desktop (which
> doesn't work) and my laptop (which does) are on the same home network
> connecting outbound. I'll keep after it.
>
> Tx,
>
> Steve
>
> "Josh" <josh@nospammers-windowsconnected.com> wrote in message
> news:9EE0AF14-A299-4D9F-9FED-4ABA7AAE2E0A@microsoft.com...
>> Have they come out with a CMAK for Vista yet?
>>
>> --
>> Josh
>> http://windowsconnected.com
>>
>> Now with NNTP goodness!
>> "Steve Schofield" <steve@deviq.com> wrote in message
>> news:OE1eHzDDHHA.3928@TK2MSFTNGP03.phx.gbl...
>>> Hi Vista gurus,
>>>
>>> I have VPN using RRAS against a Windows 2003 server. The client
>>> installs with no problems on Vista Ultimate RTM. When I click connect
>>> I get an message box. listed below. This same works on WinXP Pro and
>>> Windows 2003 SP1.
>>>
>>> 1) "Connection manager needs elevated privilege to run the following
>>> Custom Action(s) to proceed with the connection"
>>> CMROUTE.DLL - to update you routing table.
>>>
>>> 2) When I click "Continue"
>>>
>>> 3) An error comes up with "Connect Action to update your routing table
>>> failed (80070002)"
>>>
>>> I turned off UAC and rebooted the Vista client. I looked in the Local
>>> security policy and didn't see anything, I ran filemon and didn't see
>>> anything being denied. I turned on auditing, nothing inthe Security
>>> log. I found a few errors in the application log. "The reason code
>>> returned on termination is 631" Any ideas?
>>>
>>> TIA,
>>>
>>> Steve Schofield
>>> Microsoft MVP - IIS.
>>
>

No, I have no other apps that would interfere. I reloaded Vista and tested
with the VPN client. The user created during the initial welcome aboard
"seems" but don't really support split tunnel. If I try Administrator or
other users put in the Administrators group fail with the error.

The VPN client is configured to do "split tunnel" so only the networks I
want secured are done and the rest are routed as normal. Definitely an odd
issue that is for sure. This is a real show-stopper. I would have figured
this will RC1/Beta but not an RTM product. :-) I'll keep plugging along.


--

Steve Schofield
Windows Server MVP - IIS
ASPInsider Member - MCP

http://www.orcsweb.com/
Managed Complex Hosting
#1 in Service and Support


"Josh" <josh@nospammers-windowsconnected.com> wrote in message
news:E9B3CA37-D94D-4661-B2CC-9E3E40939D90@microsoft.com...
> hmmm...
>
> Do you have apps that are on your desktop that might impact the network
> layer? other VPN clients, winsock, something like that?
>
>
> --
> Josh
> http://windowsconnected.com
>
> Now with NNTP goodness!
> "Steve Schofield" <steve@deviq.com> wrote in message
> news:%2340wELEDHHA.1012@TK2MSFTNGP04.phx.gbl...
>> This was an existing VPN package developed with CMAK on Windows 2003.
>> The odd thing it works on my laptop running vista RTM. Both my desktop
>> (which doesn't work) and my laptop (which does) are on the same home
>> network connecting outbound. I'll keep after it.
>>
>> Tx,
>>
>> Steve
>>
>> "Josh" <josh@nospammers-windowsconnected.com> wrote in message
>> news:9EE0AF14-A299-4D9F-9FED-4ABA7AAE2E0A@microsoft.com...
>>> Have they come out with a CMAK for Vista yet?
>>>
>>> --
>>> Josh
>>> http://windowsconnected.com
>>>
>>> Now with NNTP goodness!
>>> "Steve Schofield" <steve@deviq.com> wrote in message
>>> news:OE1eHzDDHHA.3928@TK2MSFTNGP03.phx.gbl...
>>>> Hi Vista gurus,
>>>>
>>>> I have VPN using RRAS against a Windows 2003 server. The client
>>>> installs with no problems on Vista Ultimate RTM. When I click connect
>>>> I get an message box. listed below. This same works on WinXP Pro and
>>>> Windows 2003 SP1.
>>>>
>>>> 1) "Connection manager needs elevated privilege to run the following
>>>> Custom Action(s) to proceed with the connection"
>>>> CMROUTE.DLL - to update you routing table.
>>>>
>>>> 2) When I click "Continue"
>>>>
>>>> 3) An error comes up with "Connect Action to update your routing table
>>>> failed (80070002)"
>>>>
>>>> I turned off UAC and rebooted the Vista client. I looked in the Local
>>>> security policy and didn't see anything, I ran filemon and didn't see
>>>> anything being denied. I turned on auditing, nothing inthe Security
>>>> log. I found a few errors in the application log. "The reason code
>>>> returned on termination is 631" Any ideas?
>>>>
>>>> TIA,
>>>>
>>>> Steve Schofield
>>>> Microsoft MVP - IIS.
>>>
>>
>

Steve,

Did you ever get anywhere with this? I'm struggling w/ the same issues.. CMAK VPN on Vista doesn't seem to like to split tunnel.

Originally Posted by Steve Schofield

No, I have no other apps that would interfere. I reloaded Vista and tested
with the VPN client. The user created during the initial welcome aboard
"seems" but don't really support split tunnel. If I try Administrator or
other users put in the Administrators group fail with the error.

The VPN client is configured to do "split tunnel" so only the networks I
want secured are done and the rest are routed as normal. Definitely an odd
issue that is for sure. This is a real show-stopper. I would have figured
this will RC1/Beta but not an RTM product. :-) I'll keep plugging along.

An excellent solution to this issue can be viewed at Using CMAK to Form a Split-Tunnel in Vista.