I have a Win2k DC that I am putting in a remote VPN site. Now, when I have the DC at the main site, it can access the security policy just fine. However, when I take it to the remote site, it can't access it. I thought all DCs were supposed to have it's own copy of this? Shouldn't it be able to use it's own copy until it makes the VPN connection? I try to make the VPN connection and it says it can't because it doesn't have access to the security policy. Ironically if it would connect, it could then access the security policy. How do I get it to access the security policy when it can't communicate with the other DCs?
 
Here is the error I get on connecting to the VPN:
 
Event ID: 20111
 
A Demand Dial connection to the remote interface <VPN SITE> on port VPN2-4 was successfully initiated but failed to complete successfully because of the following error: The L2TP connection attempt failed because security policy for the connection was not found.