Security - Allowing remote access to a server
Discussion
Hi All,
I was speaking to a family friend last night and he asked me a question in regards to his new server.
He has installed the server at his house on his home network and it has a static ip address as this allows his 5 other work collegues to access it via entering the ip address into Internet Explorer. The users then log in.
However he can't access the server locally on his home network unless he kicks the other users off the network. Firewall issue??
He says the server is shared using internet connection sharing and is running the Windows 2003 (He's got the Business user license) but he can't access files on the server using the LAN.
Personally I think he would be better off using a VPN solution which would allow the remote users to access files/emails etc. Currently 5 remote users - what are the cost implications of VPN?
Any suggestions?
I was speaking to a family friend last night and he asked me a question in regards to his new server.
He has installed the server at his house on his home network and it has a static ip address as this allows his 5 other work collegues to access it via entering the ip address into Internet Explorer. The users then log in.
However he can't access the server locally on his home network unless he kicks the other users off the network. Firewall issue??
He says the server is shared using internet connection sharing and is running the Windows 2003 (He's got the Business user license) but he can't access files on the server using the LAN.
Personally I think he would be better off using a VPN solution which would allow the remote users to access files/emails etc. Currently 5 remote users - what are the cost implications of VPN?
Any suggestions?
pmanson said:
Not sure, but doesn't 2003SBS do VPN stuff when you log in via the IE landing page thingymibob?
It could well do. (Sounds like what they are doing when they log in via IE).
I don't know enough about Servers though
I havent personally set up the IE page business but from speaking to someone who has in the past I'd understood that's what it did. If its just doing remote desktop though as some quick googling might suggest, and the remote users are logging in to his PC to work then it all starts to make sense because he wouldn't be able to work on his PC while they were logged in, his screen would just lock while they worked. That seems to fit with what he's describing.
VPN's - no cost if he can get it working himself! 2003 can be set up to accept VPN connections, and XP/2K can dial in that way and map drives etc. to work on their own PC's, connect to exchange etc. while he works on his. Allthough this does increase the risk of a virus spreading from a remote computer to the server.
Hope this helps
Hi
Can 4 other people access the system while your friend accesses it locally? IIRC SBS comes with a 5 client licences. Your friend may be the sixth person to access the system, and therefore be kicked out. What error message does he get? Id there anything in the event log??
I'm online now if I can help.
Can 4 other people access the system while your friend accesses it locally? IIRC SBS comes with a 5 client licences. Your friend may be the sixth person to access the system, and therefore be kicked out. What error message does he get? Id there anything in the event log??
I'm online now if I can help.
Chumpers said:
Hi
Can 4 other people access the system while your friend accesses it locally? IIRC SBS comes with a 5 client licences. Your friend may be the sixth person to access the system, and therefore be kicked out. What error message does he get? Id there anything in the event log??
I'm online now if I can help.
Trying to recall the conversation we had!
He can't access the server locally if the other users are accessing the server via the web.
Haven't thought about the event log. i'll try and go and see him tommorrow and see what I can find out. Am i looking for anything in particular in the event log (can you tell servers aren't my strong point!)
Anything and everything with the event log ;-)
Try and find out where your friend logs in from. Does he log in to the server locally or across the home LAN from another PC? What is the exact error message he receives? Has the user played with AD settings much?
Normally licence stuff is pretty clear in the log with what the issue is. Can you export the event log and email it to me? I will take a look then if it helps. If you get stuck, and your friend is ok with a complete stranger looking at his system, I can log in remotely and take a look.
If the remote users are accessing the server via an https:// logon, as opposed to an http:// web page then the security will be ok and will easier than bringing up a dedicated VPN tunnel. Win2k3 comes with a web server, remote desktop server and a key server so it can perform https://, which is encrypted, out of the box.
Cheers
>> Edited by Chumpers on Friday 30th December 00:09
You asked what the event log message looks like, it won't be too far away from this:
Description: The Client Access License (CAL) limit has been reached. This server is unable to serve more clients.
I should read what I'm replying to in future ;-)
Chumpers
>> Edited by Chumpers on Friday 30th December 01:17
Try and find out where your friend logs in from. Does he log in to the server locally or across the home LAN from another PC? What is the exact error message he receives? Has the user played with AD settings much?
Normally licence stuff is pretty clear in the log with what the issue is. Can you export the event log and email it to me? I will take a look then if it helps. If you get stuck, and your friend is ok with a complete stranger looking at his system, I can log in remotely and take a look.
If the remote users are accessing the server via an https:// logon, as opposed to an http:// web page then the security will be ok and will easier than bringing up a dedicated VPN tunnel. Win2k3 comes with a web server, remote desktop server and a key server so it can perform https://, which is encrypted, out of the box.
Cheers
>> Edited by Chumpers on Friday 30th December 00:09
You asked what the event log message looks like, it won't be too far away from this:
Description: The Client Access License (CAL) limit has been reached. This server is unable to serve more clients.
I should read what I'm replying to in future ;-)
Chumpers
>> Edited by Chumpers on Friday 30th December 01:17
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff