RE: Automate Install/Connection - VPN/TS Sessions

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Patrick Rouse [MVP] (PatrickRouseMVP_at_discussions.microsoft.com)
Date: 09/29/04 

Date: Tue, 28 Sep 2004 20:29:01 -0700

Have you considered using the Remote Desktop Web Connection which would allow
you do deliver the client & configuration settings via Internet Explorer?
You can restrict users to one application via their user account, but should
go further to restrict access to the servers resources, as it's not hard for
users to spawn an Explorer.exe, cmd.exe or Iexplore.exe via many applications.

http://www.workthin.com/tshta.htm#RemoteDesktopWebConnection

Customized RDWC with no server selection box, which is set in the default.htm:
http://www.workthin.com/ZIP/TSWeb.zip

VPN connection is NOT needed to connect to a Terminal Server, as RDP
Sessions are natively encrypted. I actually discourage the deployment of
VPNs unless they're site-to-site (router to router) VPNs.

Patrick Rouse
Microsoft MVP - Terminal Server
http://www.workthin.com

Patrick Rouse
Microsoft MVP - Terminal Server
http://www.workthin.com

"Jamie" wrote:

> Can someone get me pointed in the right direction on how to do this?
>
> http://www.microsoft.com/windows2000/demos/mod09.htm
>
>
> I have to give remote access to some of our teleworkers and at present only
> want to give them access to ONE application which is the front-end to an
> internal database. I have a WIN2003 server on the way that I believe can
> handle VPN and TS sessions for all the users that will connect. What I need
> to do is to automate the installation of the connection as well as severely
> restrict the access. They will login and the app will launch as soon as the
> close the app they will be logged off.
>
> Actually I have two sets of users one group will get one app and another
> group gets another different app.
>
> I know that this is "doable" but can not figure out where to get the info on
> getting it started. The client side can be 98/ME/2000/XP and possibly a
> MAC...although the MAC is not a show stopper. Variety of connection
> DSL/Cable/DU. I wanted to do PPTP VPN since my current firewall will not
> pass the IPSEC "stuff" with its current load.
>
> Thanks for any help.
>
> Jamie
>
>
>
>

Relevant Pages