Windows domain user wants to RDP to his home computer

I work at a small college and have a professor who desires to remote into his home computer.  I know that Logmein or Gotomypc would be the quickest and most efficient workaround, but he is insistent on using RDP.  His laptop (not on our domain) can connect via wireless to his account so I believe all the settings are correct on his home end.  We can also connect from our campus to his home computer on a PC that is not joined to our domain.  By default, we have windows firewall turned off via GP.  He is using Windows 7 on both systems (work/domain and home).  The attached screen shot shows what I believe to be the issue, but I can't find the setting in Group Policy that modifies it.  I am happy to tell him that it is a domain security setting and can't be changed, but he is insistent that it will work.  Can any of you point me to the right GP setting or to official literature stating that this is not possible in a domain environment?

Thanks in advance for your assistance!

BenWindows Firewall/Group Policy setting for RDP
bwhortonAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

stevegoldmanCommented:
It is certainly possible in a domain environment. Whether a computer is a member of a domain or not has no bearing on remote desktop. The screenshot displayed above shows a group policy controlling the setting to allow connections from other computers in the domain onto this computer. If this is his work computer it has no bearing on whether it will allow OUTGOING (egress) connections to his home computer. You would need to know the firewall settings on his home computer to determine that.

Being that you have been able to connect to his home PC from another system on your network, I would say the problem is elsewhere or he has fine-grained rules in place on his home PC.
0
Pradeep DubeyConsultantCommented:
This is the Group Policy :

Computer Configuration > Administrative Templates > Network > Network Connections > Windows Firewall > Domain Profile > Windows Firewall: Allow Remote Desktop Exception

Make sure both machines are in the same network.

Along with this you need more info to fulfill the requirement, check below blog for the same.
http://social.technet.microsoft.com/Forums/windowsserver/en-US/46596d1d-4d5b-43c2-994e-2a97ed5d5d69/remote-desktop-exception-in-firewall-configured-via-gpo-not-taking-effect?forum=winserverGP
0
Lee W, MVPTechnology and Business Process AdvisorCommented:
Question 1:
What version of Windows is he running at home?  Windows 7 Home?  If so, he cannot.  RDP TO a home machine is not possible.  Pro, Enterprise, Ultimate then continue...

Question 2:
Can he connect via RDP to his home machine from ANYWHERE ELSE?  If so, then the problem is on your network (or his office PC) not permitting him to connect.  If not, then the problem is not on your network (at least so far - FIRST he needs to be able to do it from somewhere else).
0
Become a CompTIA Certified Healthcare IT Tech

This course will help prep you to earn the CompTIA Healthcare IT Technician certification showing that you have the knowledge and skills needed to succeed in installing, managing, and troubleshooting IT systems in medical and clinical settings.

bwhortonAuthor Commented:
I am going through the above suggestions and continue to test.  Will post an update later today or tomorrow morning.  Thanks for the input thus far.
0
Darr247Commented:
Update both computers to use the latest RDP service
e.g. for XP and vista - http://support.microsoft.com/kb/969084
latest for Win7 and server 2008 - http://support.microsoft.com/kb/2592687
I believe they also make one for Macs, though I'm not sure where that's at.

Then setup the home machine and network like so
http://windows.microsoft.com/en-us/windows7/allow-remote-desktop-connections-from-outside-your-home-network
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
bwhortonAuthor Commented:
I've attempted the suggestions listed above related to the on-campus computer, but no luck.  His machine is setup correctly at home (as I stated above, non-domain computers can connect to it).  It is only domain machines that are not able to connect.  Not sure where to go from here, but will likely point him to use GoToMYPC or LogMeIn as an alternative, whether he wants to or not.  I'm going to give it one more day, then punt if we can't get it working.  Thanks
0
bwhortonAuthor Commented:
Our network admin/firewall admin admitted that it was his fault.  We use Packetshaper and by default, it has a rule that blocks outbound RDP.  Thanks for all your input.

Ben
0
bwhortonAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for bwhorton's comment #a39601116

for the following reason:

If your network infrastructure/security folks "say" that it is not their problem, make sure they show you the rules and prove it.  I spent untold hours unnecessarily chasing my tail to no avail.
0
Darr247Commented:
Step 2 in the last microsoft.com link I gave in http:#a39580054 is
"Make sure Remote Desktop is able to communicate through your firewall."
0
Darr247Commented:
Step 2 in the 3rd/last microsoft.com link I gave in
http://www.experts-exchange.com/Networking/Windows_Networking/Q_28268850.html#a39580054
is "Make sure Remote Desktop is able to communicate through your firewall."
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Networking

From novice to tech pro — start learning today.