Solved

sbs 2008 remote desktop to a client computer

Posted on 2011-02-21
8
923 Views
Last Modified: 2012-05-11
SBS 2008 network with 25 XP Pro computers, Cisco PIX Firewall/VPN.  When I'm in the network I can RDP to any workstation and to the server no problem.  When I'm outside the network and VPN into the network I can't RDP to any workstation.  I can RDP to the server, but can't RDP to any workstation.   I have tried RDP using the machinename.domain.local and also by the IP address of the machine with no difference.  Also, as a side note I can ping the machinename.domain.local.  If I take an XP machine out of the domain I can RDP to the machine no problem.  I have had this VPN installed for several years and had no problems until I installed the SBS 2008 server and joined the machines to this new domain.

Really hope someone can give me insight into this problem.  Thanks in advance for any help.
0
Comment
Question by:tparrett
  • 3
  • 2
  • 2
  • +1
8 Comments
 
LVL 10

Expert Comment

by:jayasanker
ID: 34948268
HI Do you have any firewall policy blocking VPN to LAN Traffic??

pls verify that,

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080093f6c.shtml
0
 

Author Comment

by:tparrett
ID: 34948354
I don't have any firewall policies block VPN to LAN Traffic.  If I remove the machine from the domain I can RDP to it with no problems.
0
 
LVL 10

Expert Comment

by:jayasanker
ID: 34948544
Let me know one thing, i believe you can RDP in to SBS Server, open sbs console, then click network icon> does your computer's listed there?? if so right click on computers and click connect to a computer using terminal services!!

Is that successful??

Thx
0
Master Your Team's Linux and Cloud Stack

Come see why top tech companies like Mailchimp and Media Temple use Linux Academy to build their employee training programs.

 

Author Comment

by:tparrett
ID: 34948656
Yes - from the server I can connect to any computer.  I think this is because the server is in the same network address though.
0
 
LVL 2

Expert Comment

by:BITCooler
ID: 34949295
Here's a couple of things to check:

1) Users of the SBS domain that need to connect remotely should be added to the Mobile Users security group to have access permissions.

2) Check your VPN connection when you remote in and make sure your connection says "local and internet".  If your VPN connection is local only, then your VPN connection may not be working properly.
0
 
LVL 1

Accepted Solution

by:
Adi-IT-Works earned 500 total points
ID: 34949361
It sounds like it's the local firewall on your clients - SBS 08 throws in AD Policies that will only allow RDP access from the local subnet. That explains how you can RDP into that machine when you take it out of the domain.

Disable windows firewall service and try to connect from outside to verify.
0
 

Author Comment

by:tparrett
ID: 34953925
ADI-IT-Works - - I think you are on to something.  Going to the firewall on the machine I'm not able to turn it off.  Looked at the exceptions and RDP was listed, but only for the localsubnet.  Ran down this article that helped me make the change in the GPO on the server and I'm good to go now.  

http://www.petenetlive.com/KB/Article/0000193.htm

Thanks!
0
 
LVL 1

Expert Comment

by:Adi-IT-Works
ID: 34965123
Right on, glad you got it!

FYI - yes the SBS AD policy will enable firewall policy and gray it out on the client so you can't tweak there, but you can always disable Windows Firewall service in Services applett, temporarily while troubleshooting. ;)
0

Featured Post

3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
Along with being a a promotional video for my three-day Annielytics Dashboard Seminor, this Micro Tutorial is an intro to Google Analytics API data.
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question