Here's the back story, we have windows PPTP VPN setup in RRAS with NPS on server 2008. It was working fine, no problems, no issues for years (literally since 2008).
NPS controls the access restrictions through group policy. The group policy states that only users in a certain security group can connect to VPN.
Over the weekend I did some upgrades:
-Upgraded ESXi from 5.1 to 5.5
-Upgraded the VMtools in all the virtual servers (including the VPN server)
-Upgraded the virtual hardware to version 10 in all the VMs (including the VPN server)
Then I shutdown the entire vSphere infrastructure to halt IO to the SAN and...
-Upgraded the SAN firmware to the latest version
Also note that I did not install any Windows updates.
I bring all the servers up, and everything is working, except VPN. When someone tries to connect they get "Error 628: The connection was terminated by the remote computer before it could be completed."
Here's the weird part, I can connect to VPN using my phone. It connects, authenticates, assigns me an internal IP address and works as expected. I can RDP to servers, connect to AD, it works. When I try to connect from my laptop, I get error 628, from either behind my firewall, or off my network.
Here's what I've tried, rebooting the VPN server, rebooting the AD servers, double checked the RRAS and NPS settings, created a new VPN server with local authentication that was not joined to the domain - still couldn't connect, rebooted the firewall (which wouldn't seem to matter since it won't connect whilst on the LAN - and usually it can), and all the while my Droid phone will connect without issue.
I'm scratching my head at this point, what else can i try?