External user

[maya14]

We have a software company that needs access to our SBS network and server for remote support. Can i safely create user on SBS so that external support staff can use VPN/remote desktop/VNC to access our SBS network?
IF yes, what is the best way of restricting that user to certain resources or should i not allow this kind of access?

 

[ShackDaddy]

It comes down to whether the user needs admin rights. If the contractors will use remote desktop, the user account will need admin rights. If you are using VNC/LogMeIn and trying to get some work done at the server, the account will need admin rights.

Once the users has admin rights to your domain controller (any SBS server), then there isn't any "restricting" you can do.

If they only need access to files in a certain directory and don't need to admin the server, you can set VPN and set up a new user using the Mobile User template, only giving that user access to the share that contains the data that you want to provide access to.

ShackDaddy
Shackelford Consulting