After still more research I found the solution for our problem:

Starting with Vista there is a hidden configuration setting called
UseRasCredentials.
If this is set to 1 Windows uses the credentials of the VPN connection for
all further accesses (this is contrary to the behaviour of XP).

Details can be found he
http://social.technet.microsoft.com/...-50a5c13a2713/