sidewinder Posted February 10, 2012 Posted February 10, 2012 I own the domain but they have bought rights to use it. I was setting it up as a blog but gave up because its to complicated to write with some many different networks out there. It will eventually fall over to them its just red tape at the moment. This has been setup very quickly to meet the demand and is still in progress. all that information will be put up soon. As far as company and stuff i think i might have confused you by my wording. your not buying hardware / software / any special programs etc etc. It is just the knowlegede of how to put everything together. Simply you will if you want it just be paying for a guy to install it. Just the same way a non technical user will ask for an IT guy to pop round and fix their home computer and pay them for it. If they decide to turn it into a company its upto them I am out of the loop now. "It is not compulsory to register a business name but you can do so with the National Business Register" I don't understand whats fishy? you think i'ts a con or something? I have been very open about what is going on. Do you think the system doesn't work? Your more than welcome to pop down Gillingham School and have a look. I don't mind showing you a demonstration. I think this is a brilliant piece of kit and would gladdly help other schools see how it will help them. Just send me a PM and we will arrange a time and date. The only reason I posted on here was to let people know it is now possible and to get DirectAccess when orginally it was not. The reason i have let it go is because the people now running it have the funds to do so and the time. I'm quite happy with my well paid job and with a 1 year old baby i don't have the guts to leave it and start a project on my own. Anyway this is going to be my last post on the subject its nothing to do with me anymore. You can draw your own conclusions but I wouldn't slate a people with out trying them or the software first hand. Have a good snowy day everyone I'm sure your solution works from the amount of posts you have made about it! It's just, as localzuk says, in the space of a few days you have gone from seemingly wanting to help people by asking them to pm you to it being sold and suddenly being a chargeable solution...the cynic in me says your contribution in this thread might have just been for the purposes of advertising your solution.
gshaw Posted February 10, 2012 Posted February 10, 2012 Seriously, windows comes with remote desktop web kit. Just install it under roles on the server and people just visit a web page which turns into a fully functioning remote desktop session. I don't see why anyone would need anything else to be honest. Here is a pic of ours. This is in a web browser, not using anything else. [ATTACH=CONFIG]12899[/ATTACH] How is it secured though, have you got some sort of SSL on there or making connections through VPN?
ScottLogan Posted February 10, 2012 Posted February 10, 2012 (edited) I'm sure your solution works from the amount of posts you have made about it! It's just, as localzuk says, in the space of a few days you have gone from seemingly wanting to help people by asking them to pm you to it being sold and suddenly being a chargeable solution...the cynic in me says your contribution in this thread might have just been for the purposes of advertising your solution. I completly understand where you are comming from. But not every one is evil in this world there are still some genuin people out there. I have been completly inundated with messages of people wanting help. This has exploded into a situation which I cannot handle. I am happy sat here with the way my life is at the moment. I dont have any spare time to give what is now 100's of schools help with setting this up for their individule network setup. I bearly get enough time with my son at the moment as it is. I don't want a life of doing the same thing day after day I like new problems new things to discover. Then I get all the abuse from people on this forum with comments that just ends with answers with me going around in circles because they know nothing about the product, wasting even more of my time and being unhelpful to other readers. Basically I have gotton fed up of the whole thing and decided someone else can take it on. I don't need it, I don't want it and you have all made something that was meant to be helpfull for all those people who want it very negative with unhelpful comments. I understand where people are coming from but I have also answered every question. another example of a circle in order to answer previous posts "This has been setup very quickly to meet the demand and is still in progress. all that information will be put up soon." I'm not having an indivdual go at any particular person i'm just fed up and venting. So lets bring this back to basics DirectAccess now works behind NAT's, If its not for you try something else there are plenty of very useful comments on here that show alternatives. If you want to see what else is out there for example try SonicWALL, Inc. - Dynamic Security for the Global Network - United Kingdom I am trying to be as fare as possible in my comments and have suggested alternatives and even suggested using more than one product. Just because I am suggesting products doesn't mean I am selling them. There are many post doing the exact same thing here. They are just posts to try and be helpful. I am still happy to be a school who demontrates this for anybody its not a problem I am trying my best to be helpful and give everyone the best information. On a side note to those people contacting me, yes I will pass your details on and they will contact you soon. There is just alot of details to pass and should get through them all this weekend or soon after. or just go direct. sorry i'm just tired and fed up. 2am wake up with kid = long day. Edited February 11, 2012 by vikpaw Unauthorised Advertising
bantonia Posted March 14, 2012 Posted March 14, 2012 OpenVPN to a linux server through the firewall then terminal services from the remote client. Also run a script to map drives if required. Certificates are self certified and each client has their own individual certificate for their connection.
zag Posted March 14, 2012 Posted March 14, 2012 How is it secured though, have you got some sort of SSL on there or making connections through VPN? When you say "secured" what do you mean? SSL/VPN is pointless in this situation as far as I can tell. Its a remote desktop connection, there is no need to encrypt the data stream.
bantonia Posted March 14, 2012 Posted March 14, 2012 By setting up a SSL/VPN you enable the possibilities of using services other than terminal services so it has its advantages, the downside is the slight speed decrease due to the encryption.
Ben_Stanton Posted March 14, 2012 Posted March 14, 2012 We are using RD Web access (with remoteApp) here. Very good indeed. But, you will need to spend some cash on a server with some grunt. Ben
gshaw Posted March 14, 2012 Posted March 14, 2012 When you say "secured" what do you mean? SSL/VPN is pointless in this situation as far as I can tell. Its a remote desktop connection, there is no need to encrypt the data stream. Might be wrong but in theory if you're sending keystrokes and \ or displaying confidential data (MIS system etc) over the Internet (via the RDP stream) it seems a bit iffy to me? Just realised our new Palo Alto box has a rather funky remote access system built in so problem solved
edutech4schools Posted March 14, 2012 Posted March 14, 2012 Thinking about playing with remote desktop services. Do I need a ssl certificate?
zag Posted March 14, 2012 Posted March 14, 2012 Might be wrong but in theory if you're sending keystrokes and \ or displaying confidential data (MIS system etc) over the Internet (via the RDP stream) it seems a bit iffy to me? As far as I know there is no way to intercept RDP data. SSL is overkill for this kind of scenario.
localzuk Posted March 14, 2012 Posted March 14, 2012 As far as I know there is no way to intercept RDP data. SSL is overkill for this kind of scenario. The standard RDP setup is susceptible to man in the middle attacks via ARP poisoning - so intercepting the data is not impossible, and keystrokes etc... would be grabbable and decryptable. You should set up transport layer encryption to mitigate the risk. Configuring Terminal Servers for Server Authentication to Prevent 3
gshaw Posted March 14, 2012 Posted March 14, 2012 (edited) We are using RD Web access (with remoteApp) here. Very good indeed. But, you will need to spend some cash on a server with some grunt. Ben Would be interested to know how you got on with the issues mentioned on the previous page http://www.edugeek.net/forums/how-do-you-do/89525-school-remote-access-how-do-you-do-7.html @zag you might want to get those RDP patches installed on your server asap if it's open to the Internet... Edited March 14, 2012 by gshaw
Ben_Stanton Posted March 14, 2012 Posted March 14, 2012 Which issues specifically? Not really clear on that page what you mean.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now