sbs 2008 remote desktop to a client computer

Posted on 2011-02-21
Last Modified: 2012-05-11
SBS 2008 network with 25 XP Pro computers, Cisco PIX Firewall/VPN.  When I'm in the network I can RDP to any workstation and to the server no problem.  When I'm outside the network and VPN into the network I can't RDP to any workstation.  I can RDP to the server, but can't RDP to any workstation.   I have tried RDP using the machinename.domain.local and also by the IP address of the machine with no difference.  Also, as a side note I can ping the machinename.domain.local.  If I take an XP machine out of the domain I can RDP to the machine no problem.  I have had this VPN installed for several years and had no problems until I installed the SBS 2008 server and joined the machines to this new domain.

Really hope someone can give me insight into this problem.  Thanks in advance for any help.
Question by:tparrett
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +1
LVL 10

Expert Comment

ID: 34948268
HI Do you have any firewall policy blocking VPN to LAN Traffic??

pls verify that,

Author Comment

ID: 34948354
I don't have any firewall policies block VPN to LAN Traffic.  If I remove the machine from the domain I can RDP to it with no problems.
LVL 10

Expert Comment

ID: 34948544
Let me know one thing, i believe you can RDP in to SBS Server, open sbs console, then click network icon> does your computer's listed there?? if so right click on computers and click connect to a computer using terminal services!!

Is that successful??

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Author Comment

ID: 34948656
Yes - from the server I can connect to any computer.  I think this is because the server is in the same network address though.

Expert Comment

ID: 34949295
Here's a couple of things to check:

1) Users of the SBS domain that need to connect remotely should be added to the Mobile Users security group to have access permissions.

2) Check your VPN connection when you remote in and make sure your connection says "local and internet".  If your VPN connection is local only, then your VPN connection may not be working properly.

Accepted Solution

Adi-IT-Works earned 500 total points
ID: 34949361
It sounds like it's the local firewall on your clients - SBS 08 throws in AD Policies that will only allow RDP access from the local subnet. That explains how you can RDP into that machine when you take it out of the domain.

Disable windows firewall service and try to connect from outside to verify.

Author Comment

ID: 34953925
ADI-IT-Works - - I think you are on to something.  Going to the firewall on the machine I'm not able to turn it off.  Looked at the exceptions and RDP was listed, but only for the localsubnet.  Ran down this article that helped me make the change in the GPO on the server and I'm good to go now.


Expert Comment

ID: 34965123
Right on, glad you got it!

FYI - yes the SBS AD policy will enable firewall policy and gray it out on the client so you can't tweak there, but you can always disable Windows Firewall service in Services applett, temporarily while troubleshooting. ;)

Featured Post

Forrester Webinar: xMatters Delivers 261% ROI

Guest speaker Dean Davison, Forrester Principal Consultant, explains how a Fortune 500 communication company using xMatters found these results: Achieved a 261% ROI, Experienced $753,280 in net present value benefits over 3 years and Reduced MTTR by 91% for tier 1 incidents.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question