asked on

Connecting to the computer on Windows 2008 network remotely

Hi,

I have Windows 2008 Network with Windows 7 PCs on the network.
Is it possible to remotely connect to the workstation PC directly (not to Terminal Server) from outside of the network using remote desktop?
I know on SBS2011 network I can connect to a workstation PC via RD Gaetway Server Settings in Remote Desktop Connection.
I am trying to avoid installing remote access programs such as Logmein or TeamViewer or Port Forwarding setup (like TCP 3390) on the router.

Thanks.

jli168

Are you sitting behind firewall? Are you workstation on DHCP? I would recommend do port forwarding or you can one to one NAT if you have enough external ip.

JL

ASKER CERTIFIED SOLUTION

Hypercat (Deb)

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

sglee

ASKER

@jli168
Are you sitting behind firewall? ---> no firewall. Just Linksys router
Are you workstation on DHCP? ---> Yes it gets IP address from Domain Controller (W2008 Svr)
I would recommend do port forwarding ---> This is what I will do if there is no other option like in SBS2011 network.

sglee

ASKER

@ hypercat

"Open VPN connection and run Remote Desktop to connect to internal PC" ---> That is a good idea. I did not even think about that.

Or ... we have a Windows 2008 Terminal Server. So the user can connect to theTerminal Server first and launch another remote desktop sessoin to connect to his/her office PC.

Hypercat (Deb)

Yes, as you say you could do it either way. However, for them to connect to the TS and then open a separate RDP session to their own workstation, working in an RDP window within an RDP window might be a bit confusing for the user.

If you already have a terminal server, I have to ask: Why do the users need to connect to their own PCs? It seems rather redundant to say the least...

sglee

ASKER

" It seems rather redundant to say the least... " ---> because they have some software on their desktop. Those software may not be compatible with TS or too complicated to setup/run on TS.

Hypercat (Deb)

I see your point. I think the VPN/RDP direct to the user's desktop might be the better alternative. On the other hand, the terminal server solution does avoid your having to open more ports on your firewall. And, depending on how they work, it might be more convenient for the users to connect to the terminal server, work on that platform, and then do another RDP from there to their own workstation.

In any case, you might want to think about security. If it's a concern at this firm that users shouldn't have access to each other's workstations, then you would want to be sure that each user has remote access permissions only to his/her own workstation.

sglee

ASKER

I like both options (1) VPN/RDP (2) TS/RDPtoWS because they both allow local printing and full access to their computers.
They are both two step processes, but (1) VPN/RDP option requires RRAS setup whereas (2) TS/RDPtoWS is already there.
If I can verify local printing, I think I will go with (2) TS/RDPtoWS option for now.

Let me ask you guys:
So unlike SBS2011, there is no way to connect to the workstations from outside using Remote Gateway settings in remote desktop connection in Windows 2008 network?

SOLUTION

Hypercat (Deb)

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

sglee

ASKER

Let me try to setup separate Windows 2008 Server as a Virtual Machine on a test server and install TS Gateway feature. I will post the result.

sglee

ASKER

For now, I decided to go with VPN / RDP solution.
I will try setting up install TS Gateway features on Windwos 2008 Server later.
Thnaks for your help.

Hypercat (Deb)

You're welcome, and good luck with this project!