Hi,
It appears that my xp clients in an SBS 2008 domain use the Windows firewall to block any remote desktops from another subnet. I just found this out as I am trying to remote them over the VPN and it just times out connecting, however I can ping them. I remoted the server, then remoted the desktop from there and stopped the firewall service since there is some group policy in the default policy that wont let me turn it off from the normal network spot. Once I did that I can remote desktop them over the VPN directly. On a side note I remote desktop them every day at the office and it always works even with the Windows firewall on. So, I assume I need to make some kind of except or change the default policy.
Any ideas on how to correct this?
Thanks
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
I cannot rdp directly to the client xp machine, but I can ping it.
I can rdp the server that is on the same subnet as the client and then from it rdp into the xp machine.
Or if I stop the firewall service on the XP machine I can remote it directly from over the VPN.
I am using openVPN, so I believe its SSL/IPSEC.
The XP system has no antivirus or other products on it. Just XP and MS office.
Thanks
Have you allowed RDP in the XP firewall as an exception?
Unfortunately my experience with VPN isnt vast but I believe openVPN is just a SSL/TLS connection and therefore would be mainly using just port 443. I wouldnt have thought it would be necessary to create an exception for this on XP Firewall - but it is something that I never use.
What is the IP of client computer and the VPN computer?
I have seen issues where remote and local computers running same IP address range but this doesnt seem to be the case in this instance.
I found the solution. The windows firewall by default sets port 3389 (rdp) to only the local subnet. That is why I can access it on the lan, but not when over the VPN. When joined to a SBS 2008 domain such as mine, it disables the abililty to allow all subnets or change the rule. So I simply stopped the firewall service on the desktop and disabled it. Problem solved!
Now if it was a laptop that travels, I would definately find the responsible group policy and modify it accordingly.
Thanks!
Business Accounts
Answer for Membership
by: naughtynatPosted on 2009-10-28 at 18:34:41ID: 25689924
Just to clarify you are RDP to the specific machine? Or you RDP to Server then to the workstation?
You arent using Remote Web Workplaces? Any particular reason for not using this?
With your VPN, are you using PPTP or IPsec?
Other than the windows firewall, any other firewall products?