Script to create a VPN connection

[Norphy]

Hi,

 

We are looking to allow remote access to the school network via a VPN connection. I have done all of the donkey work and have got a workable solution. However my manager wants a way of scripting the creation of the VPN connection on the client PCs so that the users can't do it wrong. It's just a standard L2TP/IPSEC connection so no special VPN clients are involved.

 

Does anyone have a script that can do this?

 

Cheers,

 

Norphy

[Netman]

You can create a VPN Connectoid for this using the Connection Manager Administration Kit on W2k3... (add-on install from CD)

More here... http://technet2.microsoft.com/WindowsServer/en/library/be5c1c37-109e-49bc-943e-6595832d57611033.mspx?mfr=true

[klawd]

Good luck with this - we have had nightmares trying to get VPN working for staff at home.

 

Get ready for a world of hurt when you start to run across all the crap people have on their home machines that interferes or flat out stops VPN working. (Norton...hiss!)

 

We are phasing out VPN for general use, and moving towards a Terminal Server, which I think will be more secure. With the amount of crap on peoples home machines I think VPN is probably less rather than more secure.

[Norphy]

We had VPN working quite well at my last place, no real issues to talk about.

 

At the moment we are limiting it to school laptops only, thats the nice thing about L2TP/IPSEC, you can't connect unless you have a certificate and can't get a certificate unless we say so PPTP traffic is getting blocked at the firewall.

 

I've always been a bit paranoid about exposing a school terminal server to the internet directly, personally speaking I'd rather have the extra layer that a VPN provides.

[PiqueABoo]

I've always been a bit paranoid about exposing a school terminal server to the internet directly

 

You can run RDP over SSL and have that use mutual authentication (same as Terminal Service Gateway in W2K8, but right now you have to find your own SSL).

 

I prefer that because VPNs are typically configured so the client nukes non-VPN network connectivity during the session.. can't download that big file from wherever in the background etc.

[jjundi]

Hi All,

 

here is a dos script to do it all for you,

download the attachement, read the readme_1st and enjoy.

 

Jaber

VPNScript.rar