remote access a Win2k domain which is behind befsr11 router

[Joseandres]

I need to remote access a windows 2000 domain as a regular user, I can only login as an administrator to the domain using terminal services client.
I need to be able to remotely add the user to the local computer PRINT OPERATOR'S group so that I don't get the message: "The local policy of this computer does not allow you to login interactively"
The domain is at a remote location. They user DSL and thru a Linksys BEFSR11 Router.
I configured Terminal Services on the Windows 2000 Domain. I forwarded port 3389 on the Linksys BEFSR11 router and am able to login as an administrator, but not as a regular user.
I figured I probably need to vpn into the Win2k domain to be able to add the domain user to my local PC's print operator's group... Please help!!!!!!!!!!!!!!!

 

[SgtB]

A VPN would help, or possibly set up a RAS server that you can dial into directly.
Why can't you add the user as admin? Can you contact a user at the site, and walk them through the set up? ________________________________________
Check out

http://www.security-forums.com

 

[Joseandres]

SgtB... Thanks for your reply. The user is a domain user and cannot be made a domain admin.
-----------
I tried to setup a vpn thru the internet by configuring Port Forwarding/trigering for ports: 47, 1723, 50 and 500 on the linksys router.. However, when I configured Routing and remote access on the domain controller, it lost connection to the network. I had to disable RRAS to get the domain accessible again. The VPN setup would allow me to vpn into the domain from my PC and add the user as a member of the local Print operator's group, thus later allowing me to login into the domain as a regular user using remote desktop/terminal services.

 

[Joseandres]

I solved the problem...
The problem was as follows:
I need to setup terminal services for a client who uses DSL at both locations. The domain sits behind a linksys router, and I needed to find a way to access it thru terminal services. Forwarding port 3389 on the router and making each remote user a member of the domain Print Operator's group allowed each user to login thru terminal services.
Thanks SgtB for your suggestions...