Re: Remote access to member server

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

He needs to have administrator rights on the member terminal server to run
some LOB utilities - nothing else (ie: no access to the SBS server or the
user desktops). The problem is I can't figure out how a way to let him use
RWW/Connect to Server Desktops without giving him full domain access.

--
Allan Williams



"Larry Struckmeyer" <lstruckmeyer(at)mis-wizards(dot)com> wrote in message
news:%23JtDTqq3HHA.600@xxxxxxxxxxxxxxxxxxxxxxx
Hi:

Did not read the thread that Merv posted, so this may have been covered.

First, seems to me that once the LOB person is connected to anything on
your LAN, you have exposed your entire network to him. Browse Network
Neighborhood???

Second, he will need access, so either he is a 'user' or he is an
administrator. If he poses as one of the existing users, you won't need a
license for him, but you will want to change password after he is done?

Third: have not tried this with SBS2003 as the front end, but for years
we VPN'd to the SBS 2000 servers, then RDP to the ip of our choice, either
the ip of the SBS or the IP of the TS. You might could keep the LOB guy
from logon to any system but the TS with policies for that user?

Larry


"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:Oc5xfcq3HHA.5740@xxxxxxxxxxxxxxxxxxxxxxx
Take a look at this thread Al...

SBS 2003 and ISA 2004, publish TS Server
http://groups.google.com/group/microsoft.public.windows.server.sbs/browse_thread/thread/f6e4d5e6ad382c4f/6d6db9c2395c8fc8?lnk=st&q=rww+isa+2004+terminal+server&rnum=1&hl=en#6d6db9c2395c8fc8

--
Merv Porter [SBS-MVP]
============================

"Al Williams" <donotreplydirect@xxxxxxxxxxxxxxxx> wrote in message
news:uYTsJJq3HHA.5984@xxxxxxxxxxxxxxxxxxxxxxx
What about outside of RWW - does anything exist to just goto the remote
login for that server?

The member server is a terminal server, so I suppose I should be able to
set it up for remote users to login to directly but I'm not sure how
(currently it is for internal LAN use only).

Thx

--
Allan Williams



"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:OLhuCdp3HHA.1484@xxxxxxxxxxxxxxxxxxxxxxx
Hi Al,

Unfortunately, per user restrictions can't be done within RWW. Now, if
you want to always restrict access for that user (both when on the LAN
and when using RWW), you can use:

Server Management | Standard Management | Users | (rt click) the user
account | Properties | Account (tab) | Log On To... | The Following
Computers...

Then add the target member server to the list AND also add the SBS
server. You need the SBS server specified so that the user can
authenticate to the server when logging into RWW (however, he will not
be able to log onto the SBS server itself).

The user will "see" all workstations (and the member server) in the RWW
list of computers, but will only be able to log onto the member server
itself.

--
Merv Porter [SBS-MVP]
============================

"Al Williams" <donotreplydirect@xxxxxxxxxxxxxxxx> wrote in message
news:e5htnBo3HHA.4476@xxxxxxxxxxxxxxxxxxxxxxx
We have a contractor who needs remote access to a Windows 2003 member
server in our SBS 2003 Premium network to do some short-term
maintenance on a LOB application we run on it. I know I can get him
remote access via the remote web workplace (access server desktops)
but is there anyway to just give him access to just the member server
directly without using RWW? I don't really want to expose the RWW
interface to our entire system to them if I don't have to.

Thanks.

--
Allan Williams














.

Relevant Pages

  • RE: Cannot access companyweb
    ... to migrate from SBS 2003 to SBS2003, in this period, you can't achieve this ... 825763 How to configure Internet access in Windows Small Business Server ... By this method, you need to manually restore Exchange data, SharePoint ... Another way is to create a local profile, ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote access to member server
    ... SuperGumby [SBS MVP] wrote: ... application or purpose, but a local user account, member of local ... publish TS Server ... The member server is a terminal server, so I suppose I should be ...
    (microsoft.public.windows.server.sbs)
  • Re: R2 w/ISA User type account cannot use my companys internal website
    ... Alerts\Core Server Alerts ... Microsoft CSS Online Newsgroup Support ... And our product group is still reviewing the impact of the upgrade SBS ...
    (microsoft.public.windows.server.sbs)
  • RE: Disaster Recovery
    ... Windows OS not only SBS. ... SBS 2003 server backup, the system state will be archived. ... If you restore the system state to a different hardware, ... Use Outlook to export the contents in the public folders to .pst files ...
    (microsoft.public.windows.server.sbs)
  • Re: Some Questions
    ... your SBS server to the remote POP3 server. ... if it is a POP3 connector issue or a network issue. ... Logon to one of the client workstations in the SBS network. ... = e = Restart the Microsoft Connector for POP3 Mailboxes. ...
    (microsoft.public.windows.server.sbs)