Re: How to share a file between remote users?

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Matt Gibson (mattg_at_blueedgetech.ca)
Date: 01/10/05


Date: Sun, 9 Jan 2005 17:36:14 -0800

GAK!

No FTP! Bad! FTP has about the worst security you can think
of...everything's in plaintext!

I'm assuming your security problems with VPN stem from the fact that you're
connecting an untrusted machine straight up to your internal network?

There's no real easy way to do this. I'm guessing you could use
Webdav...but I haven't played with that.

-Matt

"Mike R." <MikeR@discussions.microsoft.com> wrote in message
news:D959CEA6-D008-468A-BFB9-0C7FD2F19207@microsoft.com...
> Thank you Marcia, Matt, and Merv.
>
> Since I don't wish to use TS my other option would be VPN and due to
> security reasons it's not a good idea to do this. What about FTP? Simply
> download/upload QB database as needed. Is there any function with SBS 2003
> that I can share documents/files between exchange users over the
> http/https?
>
> Thanks again,
>
> Mike
>
> "Merv Porter [SBS-MVP]" wrote:
>
>> Sure, you can do that Mike. But like I said, the end-user experience may
>> not be satisfactory. A VPN, even with a fast broadband connection, may
>> work
>> well for small files but may also bog down with large ones (like a QB
>> database of 5 MB+). Real data has to be shoved from one end of the VPN
>> tunnel to the other. With a TS or RDP session, only screen shots are
>> passed
>> down the tunnel and all the processing takes place on the LAN (at the
>> server
>> and/or workstation)
>>
>> You'll also need to install a licensed copy of QB on each remote computer
>> and that user will have to be a member of the local administrors group on
>> their computer, not a limited user (ok, there are some reg edits that can
>> be
>> done to get around this if you really want to pursue it).
>>
>> SBS 2003 can't run TS in Application mode so you can't use SBS as a
>> Terminal
>> Server itself. (SBS 2000 could, which wasn't a good idea from a security
>> standpoint anyway). So you're pretty much stuck with a VPN approach if
>> you
>> don't want to go with a Remote Desktop or TS solution.
>>
>> And then there's the (potential) virus/trojan/worm problem with a VPN
>> connection. Are you sure you have enough control over the remote users'
>> machines so that they don't compromise your SBS LAN? This is where RWW,
>> TS
>> or RDP session have a distinct advantage. Only screen shots (not real
>> data)
>> are send over the wires.
>>
>> --
>> Merv Porter [SBS MVP]
>> ===================================
>>
>> "Mike R." <MikeR@discussions.microsoft.com> wrote in message
>> news:D582267E-6FA9-4770-B485-C7E76584FCE5@microsoft.com...
>> > What if I don't want to install an additional computer and only want to
>> use
>> > my SBS to let the users connect to this database file?
>> >
>> > "Merv Porter [SBS-MVP]" wrote:
>> >
>> > > You're probably looking at a Terminal Server sitting beside the SBS
>> > > in
>> the
>> > > main office. Trying to share a database (of any size over a couple of
>> MB)
>> > > over a VPN connection may not produce a very pleasant end user
>> experience.
>> > > Of course, along with the TS server equipment, you've got Win2K3
>> > > server
>> > > software, TS CALs and QB CALs. The required Win2K3 server CALs are
>> > > free
>> due
>> > > to the SBS install on the LAN.
>> > >
>> > > Now, if the remote users can (somewhat) schedule access times to the
>> > > QB
>> > > database, you may be able to set up a dedicated Win XP Pro PC or two
>> > > on
>> the
>> > > LAN and have the remote users access it. The PC wouldn't need MS
>> > > Office
>> or
>> > > other software on it. just the QB client software to access the
>> > > database
>> on
>> > > the server. This could also reduce the numbe rof QB licenses you'd
>> need.
>> > > In general, the PCs also may not need a monitor since they could be
>> accessed
>> > > from any other workstation in the LAN (via RDP) for remote
>> administration.
>> > >
>> > > --
>> > > Merv Porter [SBS MVP]
>> > > ===================================
>> > >
>> > > "Mike R." <MikeR@discussions.microsoft.com> wrote in message
>> > > news:9F4956B6-39EC-4018-84D0-29468E90C2C7@microsoft.com...
>> > > > Marcia, thanks for the reply.
>> > > >
>> > > > They don't have client computers. They are remote users only.
>> > > >
>> > > > "Marcia" wrote:
>> > > >
>> > > > > RWW. Assuming they have actual client computers, then let them
>> connect
>> > > to
>> > > > > their client computer. That's the easiest if they also have
>> > > > > office
>> > > > > computers. If not, I'd do VPN.
>> > > > >
>> > > > > Marcia
>> > > > >
>> > > > >
>> > > > > "Mike R." <MikeR@discussions.microsoft.com> wrote in message
>> > > > > news:5BD56F37-988F-492D-B706-D8F64A78D406@microsoft.com...
>> > > > > > I have a QuickBooks file which I would like to let selected
>> > > > > > people
>> to
>> > > > > connect
>> > > > > > to it remotely and don't know what my best option would be! Is
>> there
>> > > any
>> > > > > > better option than VPN with SBS to do this?
>> > > > > >
>> > > > > > Thanks,
>> > > > > >
>> > > > > > Mike
>> > > > > >
>> > > > >
>> > > > >
>> > > > >
>> > >
>> > >
>> > >
>>
>>
>>



Relevant Pages

  • RE: 1 NIC or 2 Security
    ... I understand that you want to know 1 NIC SBS ... we can not make sure which is more security between hardware VPN ... If you want to set VPN server on SBS, we recommend to use 2 NICs. ...
    (microsoft.public.windows.server.sbs)
  • Re: RPC over HTTP: security and administrative issues?
    ... Yes a VPN PC in the network could cause security and Virus concerns ... Two servers, one running Citrix, the other SBS premium. ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote Access to SBS
    ... I know establish VPN connection to the my firm ... Configure the server side, by running the Remote Access Wizard (this is on ... If you have a router in front of your SBS ... Publishing an FTP (or ...
    (microsoft.public.windows.server.sbs)
  • Re: Publishing FTP on SBS
    ... FTP is highly unsecure! ... If you have SBS either RWW or VPN to get what you need ... Microsoft MVPs ...
    (microsoft.public.windows.server.sbs)
  • Re: FTP Server Implementation
    ... I agree with you that the IIS FTP may cause security problem if you ask the users to key in their user ... Using a third party FTP server and different user accounts and passwords is a good ... >2) Run it on the SBS ...
    (microsoft.public.windows.server.sbs)