Remote Domain Controller or Site-to-Site VPN or Both?

Posted on 2011-10-03
Last Modified: 2012-10-23
We have begun hosting some of our software with a remote vendor.  We now access this software via  RDP (RDS) and via RDP have access to our mapped drives and network printers via RDS services.  One of our newly hosted software products also requires local access to Outlook, which requires us to install Outlook at the hosted site as well as locally.  We were wondering whether the installation of a remote domain controller and/or a site-to-site VPN might allow us to have direct access to mapped drives and printers (instead of the RDP re-direct), direct access to local network machines and shares and allow us to open a single instance of Outlook.  The remote site is AD 2008 and we are currently AD 2003, but realize we will need to move to 2008 soon anyway,  Any thoughts and suggestion are considered valuable.

Thank you.

Ned Forster
IT Manager
West Point Association of Graduates
Question by:WPAOG-ISD
    LVL 6

    Accepted Solution

    In this case, I suppose the hosted RDS machine is not connected to a domain. Users are using local accounts to log on. Using the redirected drive features of RDS client, you can access files on your computers in the company network thanks to the credentials you entered to log on your workstation.

    If you want to browse your company files from the hosted machine, you should include the hosted server in a domain, that means set up a site-to-site VPN.

    ADding a controller is optional, since I dont think you have thousands of connections or need to massively serach objects in AD, I don't think a DC would be usefull.

    Once your VPN is set up, modify hosted server DNS and add it into the domain. Lock or stop using local accounts and ask RDS users to use their AD login password to access this machine.
    This way, users will have access to Printers, Shares, Files and everything else. Take good note that large files will be a pain to open (140Mb PPT from the hosted site will be quite bandwidth consuming)

    Regarding Outlook (and assuming you are using Exchange Server), it will connect to your server using SSO, as if the it was in you local network.

    If AD and File sharing is just optional, you can also leave everything as it is actually, and use Outlook Anywhere feature of Exchange (RPC over HTTP/s) to connect to your mailbox without even using a VPN.

    Usually, machine hosted in datacenters with no VPN  have no access to company network and are able to work on their own. Ask yourself if browing files and printer is really a necessity or if a PDF printer with a SMTP mail account can do the trick


    LVL 6

    Expert Comment


    No news from you, I'm available if you have more questions or if you want to discuss about vpn / no vpn scenarios.



    Featured Post

    Find Ransomware Secrets With All-Source Analysis

    Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

    Join & Write a Comment

    If your business is like most, chances are you still need to maintain a fax infrastructure for your staff. It’s hard to believe that a communication technology that was thriving in the mid-80s could still be an essential part of your team’s modern I…
    Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now