Need introduction to Terminal Services.

[J741]

I am new to Windows 2000 server, but not to Windows NT 4.0 server. I have never used Windows Terminal Services.

My reading seems to indicate that the Windows Terminal Services included in Windows 2000 Server can be used to remotely access Windows as if I were sitting at the PC itself, with all the GUI features. This interest me, as I have been using pcAnywhere for this function on my Windows NT 4.0 machines.

However, I am confused about the requirements to implement Terminal Services. Do I need to throw even more money at Microsoft for special licenses to use this service which was distributed on the W2K Server CD-ROM, or will the normal CAL be sufficient?

- James.

 

[J741]

Also, will I need special software on the client machine in order to use Terminal Services? If so, can this be automated when I try to remotely access the server from a VPN connection?

- James.

 

[MarcS1]

The remote admin mode of Terminal services allows for 2 connections without needing additional licenses. You will need to load the terminal services client from the cd.

 

[J741]

Excelent. That's quite sufficient.

Thanks.

 

[heresahandle]

I'm also trying to figure out if TS is right for me...

I'm setting up a small network(one new server to host our application, and one/maybe two workstations...all three will probably be brand new Dells, WinXP/Win2k3 Server)

I need to have at least two remote users access a workstation so they can use this application, which will run through a mapped drive to the server. I'm not sure if I'd rather have them access the server directly. I want to say that using the application by accessing the server is not recommended/supported by the manufacturer.

pcAnywhere and GoToMyPC don't support simultaneous multi-user access, which takes them right out of the situation. like I said, there will only be two workstations at maximum, so Citrix is out also. too expensive(what might that cost, anyway?)

is Terminal Services the solution I'm looking for? is there a better product or service that I should be using?

I would also like this to be scalable since the company will probably be growing in the future.

Also, please ask me to clarify anything you'd need to know.

Thank you

A+ Certified

 

[technome]

Citrix is in another league ( would cost thousands more)and for major security would require more hardware). I would highly recommend you run the RDP client through a VPN tunnel for security. Terminal server crushes PcAnywhere as to speed, you will find running programs through TS can be faster than running on a workstation within your network. Download the newest client from the MS download site. Ts needs plenty of ram, it's main hardware requirement. Before you do the setup I would research a good bit; providing the needed security is the biggest challenge.

 

[heresahandle]

so for TS I would need them to connect directly to the server? I can't put TS on Windows XP Pro, right?

is it possible to spread a virus through a VPN?

Also, I understand how VPN's work, but I have never implemented one. Can you give me a link to something that'll show me how to get started? Maybe another forum on tek-tips.com?

I know enough about networking through my studies, but I don't have actual hands-on experience with setting them up.

 

[technome]

You need windows 2000 server or windows 2003 server.

Yes it is possible to infect a machine through a VPN.

They have a VPN forum on this site. I use Sonicwall (at main offices) quite a bit, mainly with LinksysVPN gateway routers creating a "box to box" tunnels. The Sonicwalls also has a software client. The VPN will be harder to setup than the Terminal server. There are other VPN firewalls, and native RAS VPN

I would recommend getting a consultant to do this setup, with no experience you will not have a fun time at this. Do yourself a favor and pay for the intial setup. Firewall setups alone can be daunting, noless VPN. Even after you have someone set it up, you have a couple of weeks of heavy reading.

 

[heresahandle]

what do you think it might cost for a consultant to do this? the whole point of the boss asking me to do it was to save a few bucks.

Is this something that can be done in a day? and would they/I have to be onsite at the remote client's machine to set this up?

 

[technome]

Trust me, unless you can read solid for a couple of weeks, and comprehend everything you WILL be smashing you head against the wall very quickly, I did a few years back; and this is after working on NETs for over 12 years.

Sonicwall has tech support, and you will need it, but it is not the hand holding type. I recommend sonicwalls because of the support, they are relatively easy to setup, and they are secure. Even with tech support, setting up a firewall/vpn can still be a nightmare.

Never used this site, but they pre-config Sonicwall units

http://www.firewalls.com/default.asp?source=Google.

These guys setup the basics for $ 89.00, without VPN, VPN is extra. For $89.00, I am sure this is the absolute basic charge, which will go up

Guessing, in NYC, the charge would be $ 1000.00 to setup, with VPN group and one Linksys box to box setup.

This is not something to try and save a buck on. If you do not understand the security, you can leave your NET open to hackers. Trust me, this get extremely frustrating when you can't connect, you can kill many days getting a VPN going.

Before you implement the firewall/VPN you will need a broadband connection with at least one static IP. Couple of my clients have DSL with 384up and down, which is plenty fast for TS, obviously the higher the speed the better, TS will even work over dial up with decent speed; cable offers packages also.

In NYC any static addressed line is expensive. The remote sites do not need static addresses, but static address at the remote sites are preferable. I use standard cable, Road Runner, at my home office with a dynamic address to connect to my clients.

With the Sonicwall be careful of chosing the right one, especially note how much the VPN clients, and yearly maintenance will run. The SonicWALL TZ170 series should be sufficient for the main office, but CHECK the options cost before you buy, if you think you will need a DMZ port later, have that in mind. The Sonicwall site is deceptive, talk to a Sonicwall salesperson first, carefully tell them all your needs. Adding "upgrades" gets expensive.

For the remotes, Linksys BEFsx41(s) are good. The Sonicwalls for the remotes are expensive.