Hi Paul, Windows has a "feature" where it will use your VPN credentials to access resources such as network shares over the VPN. We experienced that issue, where the VPN account was the same as the users AD username but did not have the same password, and it caused the account to get locked out very soon after the VPN established. We simply made sure that any usernames did NOT exactly match the AD username (eg vpn.username) and that made things more reliable. Of course, if you use RADIUS authentication against your AD, then the feature actually helps you rather than causing an issue. Could your issue be related to that? Regards, Philip Loenneker | Network Engineer | TasmaNet -----Original Message----- From: Public <public-bounces@talk.mikrotik.com.au> On Behalf Of Paul Julian Sent: Tuesday, 28 May 2019 11:02 AM To: 'MikroTik Australia Public List' <public@talk.mikrotik.com.au> Subject: Re: [MT-AU Public] Mikrotik VPN and MS Windows authentication issues HI Mike, Yes they are on the same subnet, proxy-arp isn't enabled so maybe that is the issue. The strange thing is that some people work and some people don't, so maybe it is proxy-arp. Regards Paul -----Original Message----- From: Public <public-bounces@talk.mikrotik.com.au> On Behalf Of Mike Everest Sent: Tuesday, 28 May 2019 10:28 AM To: 'MikroTik Australia Public List' <public@talk.mikrotik.com.au> Subject: Re: [MT-AU Public] Mikrotik VPN and MS Windows authentication issues Do remote clients get an address that is on the LAN, or are they routed through? If the address is on the LAN, then you probably need to enable proxy-arp on the lan interface of the pptp server router. Cheers! _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au