Re: Getting back SBS TS access

Tech-Archive recommends: Fix windows errors by optimizing your registry

I agree the SBS remote web workplace is a nice feature but this is easy to
duplicate in a non sbs environment.

on your firewall create a range of open ports , for example 10,000-10,100

for each internal machine that a user wants external access to create a
custom firewall rule that redirect the external port to the internal RDP
port( default of 3389)

eg. a user with internal ip address of 10.1.1.50 and the assigned firewall
port of 10,001 and an external domain name of domain.com could connect to
their workstation from any computer using.

mstsc /v:domain.com:10001

there are other ways of doing this also but this for me is the best and most
secure

"Lanwench [MVP - Exchange]" wrote:

Bill M. <BillM@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
I made the choice due to the numbers of workstations to move from
SBS 2003 R2 to full dedicated servers with roles on many servers.
After weeks of fighting. Four calls to Microsoft at hundreds of
dollars and we are up and running on the new gear.. What a month.

Congratulations on your survival....

So now I have two items that I am lost to fix. ( Well with out a
further expensive call to Microsoft) So lets see if I can solve it
with the wisdom on line here. Both are related to Termnal Service.

a) On the server that has the Terminal Server running ..

Which is a member server, right?

If I log
onto the TS I of course need to be approved for access . If I go to
the Domain Active Directory there is no Remote Desktop Group to
assign for that user. But there is on the server that has the TS on
it. So I need to approve the user local and it works.. How do I get
this up to the Domain level of control rather then local...

Create an AD security group called "TS Users". Add it to the server's local
Remote Desktop Users group.
Add the domain users you wish to TS Users.


b) So on SBS there is the great web based interface that allows you to
connect to the Server or a Workstation attached to the LAN.. No one
told me that I was going to loose this when I did the Transition Pack
but my users love to remind me about the lack of remote access to the
Workstation.. So not being a web developer .. Any suggestions on
getting back the ability to access the workstation.

There's no Remote Web Workplace in non-SBS environments (and yes, I agree
that it'd be nice to have). Since you've got TS, the users can't
legitimately need RD access to their desktops any longer, can they? You can
just have them use the RD client to get to server.domain.com - or install
TSWeb.

Many thanks to those who respond

Bill




.

Relevant Pages

  • Re: SBS VPN setup?
    ... And if you have a hardware firewall you haven't flashed in years they just got in through a exploit. ... SBS plugs into a switch with the other computers and the switch is plugged into a firewall appliance with 2-nics. ... To compare apples to apples, let us assume there is a network setup as I outlined above...and the firewall appliance is an ISA server, such as those available from Celestix. ... > learn and test the RWW solution before deploying it. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS VPN setup?
    ... The 2-nic configuration is used when the SBS server will *also* act as your network's firewall. ... You purchase 2k3 PREMIUM and that comes with ISA to handle the firewall duties. ... To compare apples to apples, let us assume there is a network setup as I outlined above...and the firewall appliance is an ISA server, such as those available from Celestix. ...
    (microsoft.public.windows.server.sbs)
  • Re: Cant logon to computer in SBS Domain..
    ... "certificate" key on the server, and I am not sure whether it is the SBS ... I think we should delete this registry key on the workstation ... Does the user can access and log on to the Remote Web Workplace? ... On the Firewall page, ensure that Enable firewall is selected. ...
    (microsoft.public.windows.server.sbs)
  • Re: Internet on nodes
    ... disabled state (someone please confirm this for SBS Standard, ... firewall service should result in 'ISA lockdown'. ... print' from both the server and a WS. ... Was not able to connect to the internet on the WS. ...
    (microsoft.public.windows.server.sbs)
  • Re: ceicw failure on e-mail config
    ... Merv Porter [SBS MVP] ... Ethernet adapter Server Local Area Connection: ... Call to Reading the firewall selection returned ok. ... Firewall Rule: SBS DHCP Client ...
    (microsoft.public.windows.server.sbs)