Actually, I figured it out. My problem was that in Windows 98 the last domain you tried is written to the registry and added to the PPTP login name. So mine would be DOMAIN\rdoucet, even though I only put rdoucet. I would set the vpdn username in the pix to DOMAIN\rdoucet.
Your problem is that it doesn't know what to do once it gets there. In Windows 98 and NT it's no big deal. In 2000 it's a pain. I'll stick to 2000 since that's your problem.
The first thing you have to do is to set your 2000 machine to NOT log into a domain, but to log into a workgroup of the same name. Let's say your domain name is DOMAIN. Set it to log into a Workgroup called DOMAIN. Of course you have to reboot. Now, connect to your PIX515 with PPTP. Once there, change your settings from a workgroup to a domain, with the same name of DOMAIN again. It will authenticate you, and then you still have to reboot, again that's OK. It only has to do this once, and from then on it will work.
Now, for this to work at all the computer has to know where the PDC is. In my case I had several different networks and domains, so I had to set the WINs server for the particular user in their dial-up adapter. But, if you are dealing with a single domain it's easier to set the WINs server in the PIX PPTP setup. Of course you can set multiple domain listings in a single WINs, but I won't go off on that one.
I hope this helps, GOD BLESS AMERICA!!
