Forum Discussion

WillCun's avatar
WillCun
Copper Contributor
Mar 11, 2021

disconnect-vpnuser error. (Powershell, RRAS)

Hello,   I'm trying to disconnect a user from a RRAS VPN Server with the below PowerShell command:   disconnect-vpnuser -username domain\username   However, I get the below error when the comma...
rras
farismalaeb's avatar
farismalaeb
Iron Contributor
Mar 12, 2021
Which Windows version are you using.
Type the following commands after you get the failure.

$error.CategoryInfo
$error.Exception

If you used the GUI, are able to disconnect the user
Also when you can the error from Windows PowerShell, did you check Windows Event Log \ PowerShell
  • WillCun's avatar
    WillCun
    Copper Contributor
    Mar 12, 2021
    Today I installed Universal C Runtime and also installed PowerShell 7.1.3 and I still get the same errors.
    • farismalaeb's avatar
      farismalaeb
      Iron Contributor
      Mar 14, 2021

      PowerShell will use some CIM classes to do this task, lets try it and run the following command in the RRAS Server itself

      $xArg=@{
ComputerName =$null
PassThru = $null
UserName = @('DOMAIN\TheUserName')
}
Invoke-CimMethod -ClassName PS_VpnUser -Namespace "Root\Microsoft\Windows\RemoteAccess" -MethodName "DisconnectByUserName" -Arguments $xArg


      Btw, are you using Microsoft Direct Access or its just an RRAS

      Let me know if the command above disconnects the user.
      in the background, this is what PowerShell should be calling.

      • WillCun's avatar
        WillCun
        Copper Contributor
        Mar 15, 2021

        Thanks for the reply again. When I run the script that you provided I get the below error. Similar to what I get in running disconnect-vpnuser. I am using just VPN without Direct Access. The sad thing is I have used disconnect-vpnuser on this server before. I'm using a standard phonebook entry for the user to connect via SSTP to the VPN. I have rebuilt WMI, disabled RRAS and reinstalled with the default settings. I have even built a new server that even gives the same error. At this point I'm looking into Group Policy settings to see if something is causing this error.

        Invoke-CimMethod : User domain\user cannot be disconnected.
        At line:6 char:1
        + Invoke-CimMethod -ClassName PS_VpnUser -Namespace "Root\Microsoft\Windows\Remote ...
        + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo : NotSpecified: (domain\user:) [Invoke-CimMethod], CimException
        + FullyQualifiedErrorId : REMOTEACCESS 200,Microsoft.Management.Infrastructure.CimCmdlets.InvokeCimMetho
        dCommand


        PSComputerName
        --------------

  • WillCun's avatar
    WillCun
    Copper Contributor
    Mar 12, 2021

    farismalaeb 

     

    Thanks for the reply.  When I run the commands you suggested here is what I get:

     

    $error.categoryinfo
    Category : NotSpecified
    Activity : Disconnect-VpnUser
    Reason : CimException
    TargetName : thrws
    TargetType : root/Microsoft/Windows/RemoteAccess/PS_VpnUser

     

    $error.exception
    User thrws cannot be disconnected.

     

    I'm using Windows Server 2012R2 and yes I can disconnect them from the RRAS Console.  There are no errors in the Event Viewer for Powershell.  Any help would be greatly appreciated.

Resources