MS, Win2k3Server, 5.2 SP1

Posted on 2007-08-06
Last Modified: 2013-11-05
I have users with DSL who I would like to give access as domain users. My Win2k3 server has an IP address available through my firewall (used for the OWA mail port), to which I can connect using Remote Desktop. Can I use this to set up domain access? How can I do it without comprimising security?
Question by:HilltownHealthCenter
    LVL 8

    Expert Comment

    I would probably set up a VPN.  PPTP is the easiest, L2TP is better, if you have a firewall with vpn endpoint capabilities, go with IPSEC (the other end will need atleast Client software, better if they have an endpoint device as well).  At that point they can access domain resources, rdp to machines...etc.  If you want them to be "on the domain" literally (I.E. their workstations can log into the domain directly), you will need a domain controller at your client site and replicate through the vpn from your DC to their DC.
    LVL 23

    Expert Comment

    by:Erik Bjers
    I DO NOT RECOMEND THIS, howerver if you are on a budget you can use RRAS (routing and remote access), free with Windows Svr., to setup your server as a VPN server.  WARNING THIS CAN BE A SECURITY HOLE/ NIGHTMARE IF YOU DO NOT CONFIGURE OR MANAGE IT CORRECTLY.

    The links at this page may help you

    LVL 77

    Accepted Solution

    You mention Server 2003 and OWA, is there any chance you are using Small Business Server? If so please advise as you have several additional options you can offer your users. SBS includes a customized VPN, Remote Web Workplace, and Sharepoint to give your users 3 options to connect to resources.

    If not using SBS and you want to give users access through VPN access it is quite straight forward to set up. The basic server and client configurations can be found at the following sites with good detail:
    Server 2003 configuration:
    Windows XP client configuration:
    You will also have to configure the router to forward the VPN traffic to the server. This is done by enabling on your router VPN or PPTP pass-through, and also forwarding port 1723 traffic to the server's IP. For details as to how to configure the port forwarding, click on the link for your router (assuming it is present) on the following page:
    The only other thing to remember is the subnet you use at the remote office needs to be different than the server end. For example if you are using 192.168.1.x at the office , the remote should be something like 192.168.2.x

    Once this is configured you can then use services similar to how you would on the local network. You will not be able to browse the network unless you have a WINS server installed. Also depending on your network configuration you may have problems connecting to devices by name, though this can usually be configured.. Using the IP address is less problematic such as \\\SharenName.

    Author Comment

    Enrolling on this site just keeps on proving to be one of the best decisions I have ever made over the course of my career!
    LVL 77

    Expert Comment

    by:Rob Williams
    Glad to hear suggestions were of some help, and even more so that the site has proved beneficial for you.
    Thanks HilltownHealthCenter.
    Cheers !

    Featured Post

    Gigs: Get Your Project Delivered by an Expert

    Select from freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely and get projects done right.

    Join & Write a Comment

    Secure VPN Connection terminated locally by the Client.  Reason 442: Failed to enable Virtual Adapter. If you receive this error on Windows 8 or Windows 8.1 while trying to connect with the Cisco VPN Client then the solution is a simple registry f…
    The Need In an Active Directory enviroment, the PDC emulator provide time synchronization for the domain. This is important since Active Directory uses Kerberos for authentication.  By default, if the time difference between systems is off by more …
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now