Re: CAN WE LOGIN TO A WINDOWS 2003 ACTIVE DIRECTORY DOMAIN OVER TH



Having a user login to a windows 2003 server over the internet is not a good
idea do you think because of the security issues?

Actually what I like to accomplish is that if I use a windows xp computer in
the office and way to save data to one of the computers in the home so that
when I got home, I do not have to use terminal services or VPN or RRAS to
login to the computer in office to access files since I got uploaded from
office to the home.

I am glad if you could give any idea how would you think best way to
accomplish this? Should I want to use a server or windows xp operating system
will do?

Like if I have a windows server and able to login to my server over the
internet using the username and password after joining the domain, whatever
data I saved on the hard drive can be viewed after I login using the same
user name and password in windows server I used to login over the internet
using a windows xp workstation? To me there is security issue involved with
that! Any ideas with any other safe way to do?

Any posting is much appreciated! So does that mean, only choice is terminal
service, VPN or RRAS and there is no otherway?


"Herb Martin" wrote:

In general, YES.

"CHAMI" <CHAMI@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CD47AA5C-7229-4D29-86D6-5217E9F06F4D@xxxxxxxxxxxxxxxx
Hello!

If I create a user in active directory in windows 2003 server, we can
login to that user using windows xp login dialog box within the network
giving username and password after joining the domain! Okay, my question
is
that can we login to that user sits in the windows 2003 server in active
directory over the internet?

YES, if you have routed access, including on all the correct ports
and you can resolve DNS from the point of view of an INTERNAL
user (that is from the Internal DNS server.)

The issue is NOT the Internet per se, but rather firewalls, routing,
and DNS resolution.

In order to do that we have to join the domain.
Is it possible to join a domain over the internet and login to that user
in
windows 2003 server? I mean without VPN or RRAS or TERMINAL SERVICES?

VPN/RAS makes it a bit easier since this can alter the DNS
setting during such connections to favor the "remote" DNS.

Terminal Services largely bypass the issues by placing the
user logically "at the TS".

Also if
I use VPN, does that help me to save files to windows 2003 server after I
log
in to that?

It's neither HELPS you nor HURTS you. You can do anything within
reason over a VPN you can do locally IF your connectivity and name
resolution are equivalent to a LAN User (and if timeout issues don't
interfere which is not usually the case.)


--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]



.



Relevant Pages

  • Re: been hit by hacker, servudaemon installed
    ... Every single one of the web servers and internet server operating systems ... Windows, Apache, you name it. ... commands they entered in your IIS server logs. ...
    (microsoft.public.inetserver.iis.security)
  • Re: been hit by hacker, servudaemon installed
    ... >Every single one of the web servers and internet server ... >Windows, Apache, you name it. ... >commands they entered in your IIS server logs. ...
    (microsoft.public.inetserver.iis.security)
  • Re: login attempts
    ... > Every day i have on my win2000 iternet server a lots of wrong login ... Windows by default allows ... You also need a firewall. ... the internet, except for those ports you know you're using. ...
    (microsoft.public.win2000.security)
  • RE: 403 forbidden with new server
    ... if you add the windows server 2003 to your SBS 2003 ... How to install Small Business Server 2003 in an existing Active Directory ... How to configure Internet access in Windows Small Business Server 2003 ... configure ISA server as your Proxy ...
    (microsoft.public.windows.server.sbs)
  • RE: Windows Messenger - Auto Log Off
    ... > Thank you for posting in SBS 2003 newsgroup. ... > error event on the SBS 2003 premium server after upgraded to Windows ... > reset Internet Protocol. ...
    (microsoft.public.windows.server.sbs)