RE: Restrict WAN access

James:

No, that's not what I need to do. I need to restrict access to the Terminal
Server from outside the network for some users. It's not related to internet
access, just access to the TS Server.

"James Yeomans BSc, MCSE" wrote:

Hi if i understand correctly you want some users to be able to access the
internet and some to be restricted. If this is the case and considering
you're working on a TS you shouldn't change any IP settings. on a
workstation you could remove the default gateway so the internet could not be
reached. However in this case you really need something else filteringt he
web traffic, say ISA server or another proxy type package. With ISA server
you can restrict internet access to specific users/groups. Thats the only
really sensible way to achieve what ytou are trying to.
--
James Yeomans, BSc, MCSE


"Rodrigo_live" wrote:

Hi. In my company there’s a Windows 2003 Terminal Server that users access to
work every day. W e need to restrict access to LAN only TS for some users and
LAN & WAN access to others. I’ve managed to get TS Console to identify the
two NICs in the server (LAN and WAN) by duplicating the
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal
Server\WinStations\RDP-Tcp Key in the registry (renaming each one of them
after). This way I can distinct the LAN and WAN connection and set access
port (LAN uses default 3389 and WAN uses another port) and color depth etc
etc.
On the WAN adapter I’ve set only the group who should get access outside the
network and in the LAN adapter both groups (outside users and lan users).
This works fine because LAN users can’t logon from outside the network. BUT
there’s a problem. If the user leaves his session disconnected the TS Server
will reconnect him. I can’t just restrict disconnected time period because
users work every day with a lot of documents and they leave them opened to
the next day. I’ve discovered that the SYSTEM account is the responsible of
“reconnect sessions” so I’ve tried to remove that account from the WAN
adapter and it works! The sessions are not reconnected from the outside but
the problem is that Wan-enabled users can’t reconnect to their sessions and
the system generates a new one because can’t re establish the link with the
one opened. I’ve tried almost anything and still no luck. Even if I restrict
one session by user the wan-enabled users can’t reconnect to the disconnected
session they left opened but if I give the SYSTEM account the right to
reconnect them LAN users will get access from outside the network.
Someone recommend me to use 2X SecureRDP but despite this software is grate
it can’t distinguish between LAN and WAN adapters.
Any ideas will be greatly!!!

.

Relevant Pages

  • Network Admin-Myrtle Beach, SC
    ... SofTec I.T. has a terrific permanent opportunity with a premier client ... for a Senior Network Administrator. ... Configures and maintains the organizations LAN server and LAN ...
    (comp.dcom.sys.cisco)
  • Re: DHCP issue
    ... It is just frozen on Acquiring Network ... switch, new cable, but LAN just cannot get any addresses. ... Does this server host DNS? ... FYI, despite its name, the DHCP Client service is actually the DNS ...
    (microsoft.public.windows.server.general)
  • Re: Network Speed issues
    ... the server was clean installed about 2 months ago. ... Well the nic card that I am using for the LAN side is a card and it is a ... dns suffix servername.local ... >> becomes slow network wide, ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Dial-up ICS settings = Configuration Problems
    ... On Machine #1 have you told it that it is to share its Internet connection? ... Double click on your LAN connection ... IntelPRO/100 VE Network Connection - Packet Scheduler Miniport ... Primary WINS Server: 0.0.0.0 ...
    (microsoft.public.windowsxp.network_web)
  • Re: Time server...how to set it up on FC1?
    ... Network Time Protocol is different from the "time" ... I suggest that you set up ntpd on your server. ... would set this to "restrict default ignore" and then allow access for your ... # Permit time synchronization with our time source, ...
    (Fedora)
Loading