Remote Access - How?

[ajbritton]

Are you sure about that Mr Britton. It appears to be IPSec and PPTP (yuck!) and it's only for 10 connections.

 

Hmmm. It was reviewed in PCPro as an SSL VPN appliance and given an excellent rating. I realise that 10 concurrent connections is no use for student/teacher remote access. I'm looking for something which can be used to provide remote access for primary admin staff.

[ajbritton]

I think that this is the link I should have posted.

[manick]

Right I'm joining in now, i too need to do what Zoom is asking, but we appear to be going everywhere on this thread with no solution.

 

As far as i can tell the 2 main ways of pulling this off are either VPN or terminal services server.

 

Eventually we will be wanting to connect kids and teachers from home (probably just connect them to network shares), for now I just want to connect one user who is off and who wants to connect to FMS.

 

I am considering using Terminal services just for now (for the single user), Can i install it onto one of the DCs and the user still use FMS off the SIMS server?

 

Which route would you take?

 

Cheers

[SpuffMonkey]

If you'er looking for a quick fix for one admin user - I'd go for Logmein or similar - doesn't take much effort and doesn't need any fannying about on your servers or RBC ports.

[manick]

logmein-----genius, piece of pee to set up and is encrypted to boot. sorted, thanks for that.

 

 

Manick

[m25man]

SSL VPN and Reverse Proxy have rapidly replaced traditional IPSec VPN solutions in the corporate sector.

Many LEA's use Aventail and Sonicwall appliances for remote access for council staff to internal resources.

 

Reverse Proxy or Terminal Services Gateways are to be standard in Longhorn server, providing SSL web based access to RDP, thus allowing students to log in and use your classroom PC's from home in exactly the same way as they do when in class.

 

The difference is they will be using your existing licenses and software.

Applications can be delivered directly with a 70k msi over the web.

 

This feature already exists is Microsofts Small Business Server as Remote Web Workspace.

 

The code was scheduled for release as part of 2003 R2 but was pulled by the Longhorn Team from R2 at the last minute.

 

There are some limitations however with SSL appliances such as the NG 312 and the Sonicwall that need to be fully understood before you buy into that solution.

 

Any VPN will effectively "glue" the remote pc to your LAN and if it's riddled with all sorts, you will be likely to "catch" something.

 

If you use IE at home and use an SSL device to proxy for you on your school lan the headers are often mis understood as your browser will ask for an intranet page in IE format the request will be made by the appliance in Mozilla and pass the proxied request back to your IE in a foreign format.

 

They are however very cheap, simple to install and easy to maintain.

The SMT can be working from home they same day and that will earn you brownie points.

 

Don't spend too much time or money on this project because TS Gateway on Longhorn "Rocks" and you will undoubtedly will forsake all others for this way into your school networks.

 

Just Google for TS Gateway and see what comes up.

[ITWombat]

There are some limitations however with SSL appliances such as the NG 312 and the Sonicwall that need to be fully understood before you buy into that solution.

 

Any VPN will effectively "glue" the remote pc to your LAN and if it's riddled with all sorts, you will be likely to "catch" something.

 

That's if it's true network extension VPN like OpenVPN. Broswer based SSL "VPN" doesn't home spyware malware vectors don't get direct access inside the perimeter. Everything is mediated by the application/webserver doing webmail, WebDAV etc.

 

Don't spend too much time or money on this project because TS Gateway on Longhorn "Rocks" and you will undoubtedly will forsake all others for this way into your school networks.

 

You don't work for Microsoft do you

[ScottLogan]

look on edugeek for "School Remote Access - How do you do it"

[cpjitservices]

why not just use OpenVPN ?

[Domino]

Threadnomancy!

 

I hope that, as the original posts were in 2007, that they'd have this set by now ;-)