HOW TO: Change the default domain that is used by the Routing and Remote Access Service or by IAS to authenticate users

Support for Windows Server 2003 ended on July 14, 2015

Microsoft ended support for Windows Server 2003 on July 14, 2015. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986 Description of the Microsoft Windows Registry
This article describes how to change the default domain that is used by the Routing and Remote Access service or by Internet Authentication Service (IAS) to authenticate users.

Mostly, users log on to computers that are running Microsoft Windows 2000 or Microsoft Windows Server 2003 by using a dial-up connection or by using a virtual private network (VPN) connection. Users use a user name, a password, and a domain name when they log on. Windows 2000-based computers and Windows Server 2003-based computers that run Routing and Remote Access or IAS may not be able to authenticate users if they omit one or more of these credentials. By default, if a user does not specify a domain name, Routing and Remote Access and IAS try to authenticate user accounts against the domain that the server belongs to.
Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

You can change the default domain by modifying a registry key on the server that is running Routing and Remote Access or IAS. To do so, follow these steps:
  1. Click Start, and then click Run.
  2. In the Open box, type regedit, and then click OK.
  3. Locate and then click the following registry key:
  4. In the right pane, right-click the DefaultDomain registry key, and then click Modify.
  5. In the Value data box, type RRAS or IAS, and then click OK.
Note By default, Routing and Remote Access or IAS can authenticate local user accounts on the server where they run. To turn on this authentication, follow these steps, but in step 5, type the computer name for the server that is running Routing and Remote Access or IAS instead of RRAS or IAS.

Article ID: 826158 - Last Review: 10/30/2006 21:18:27 - Revision: 1.2

Microsoft Windows Server 2003, Datacenter Edition (32-bit x86), Microsoft Windows Server 2003, Enterprise Edition (32-bit x86), Microsoft Windows Server 2003, Standard Edition (32-bit x86), Microsoft Windows 2000 Advanced Server, Microsoft Windows 2000 Professional Edition, Microsoft Windows 2000 Server

  • kbregistry kbrouting kbhowto KB826158