Remote Access to a Certain Application 1

[soe1]

Hello:
I'm currently on the following situation:

1. I need someone to log into a certain client pc from a different network, What is the best way of providing remote access to a user without giving them administrative privileges?

I'm running the following:

MS SBS 2003 Standard

 

[mrdenny]

Terminal Services will grant them access to remote into the machine without giving them admin rights. You'll need to purchase a terminal services license for them to use however.

Denny

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

(My very old site)

 

[soe1]

Can you please go about explaining the process of obtaining the Terminal Services License?....

 

[mrdenny]

Contact Microsoft or your vendor and tell them that you need to purchace Terminal Server Licenses.

Denny

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

(My very old site)

 

[GeorgePal]

How many licenses r included in the SBS 2003 Premium Edition?

 

[mrdenny]

I don't think any are. You'd have to check your documentation, or give Microsoft Sales a call.



Denny

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

(My very old site)

 

[ascotta]

GiorgosH You cannot run Terminal Services on an SBS 2003 server, you will need a separate server.

[blue]Arguably the best cat skinner around ! [/blue]

Cheers
Scott

 

[twoody54]

You say you need that person to log into a certain "client PC" from a different network. What OS is this client PC running? If's its Windows XP you can use the RDP connection from this other network to the Windows XP client PC... Also there are programs out there like Dameware, VNC(which is free), PC Anywhere etc that will allow this...

 

[soe1]

Thanks EVERYONE for such great responses!


Yes, the client pc is running Windows XP..I'm trying to avoid those softwares. See, I want to learn how to setup client PC's using Terminal Server......I have tried to assign a static ip but have failed. Any ideas?

 

[ascotta]

If you are trying to connect to the Terminal Server on the SBS server then you have to be an administrator I think. Terminal Services is installed for remote admin only by default. You cannot install terminal Services for Application server mode on an SBS server.

[blue]Arguably the best cat skinner around ! [/blue]

Cheers
Scott

 

[twoody54]

Well if the client PC is running Windows XP all you need to do is RDP to it.

First, the Win XP machine should have it enabled. Do this by going to My Computer, right clicking and going to properties. Then go to the remote tab and ensure that "Allow users to connect remotely to this computer" is checked.

Now hit "Select Remote Users..." and add the proper user to this machine.

I would test the RDP connection to this machine on the network to ensure it is configured properly before trying it remotely. Once you're sure you have it set-up you need to open up port 3389 on the firewall and point it towards that machine. The client connecting remotely should then RDP to the IP address (should most likely be static) and it should connect into the machine. The remote use would then have to enter in the proper credentials and should then be able to work away.

I believe no one can be on the machine when the remote user is connected as it will disconnect them.

 

[twoody54]

ascotta, I believe you're misinterpretting his question. He wants to connect to a client PC and not the server via TS, therefore SBS really has no bearing on this equation. The Client PC is running Windows XP per his post above and he can use RDP to connect to it...

 

[ascotta]

Aha, that is a possibility. twoody54 ta, yes agree with above I have done this and it works.

[blue]Arguably the best cat skinner around ! [/blue]

Cheers
Scott

 

[soe1]

twoody54, I appreciate your response!

Okay, I know how to setup the Client PC for remote access, but I can not assign the Client PC a static IP. Can you please explain the process. Thanks in advance everyone!

 

[twoody54]

Ok, well your server is probably set to DHCP judging by your post. Check the DHCP server setting and see what the scope of addresses it hands out are. You can either make an address reservation for that PC or you can assign that PC a static IP via its LAN settings that is outside of the scope of the DHCP server and that is not taken by something else (ie server, router, printer etc). For example our scope goes from 10.0.0.20 on up. I would assign this PC 10.0.0.19 or lower in this case.

Now your internet IP, if you want that static, you have to contact your ISP.

 

[soe1]

Okay, our scope goes from 192.168.0.11 on up. I have already tried to reserve the address and have also contacted our ISP. I already have the additional IP for this PC. I can not go pass this though...I don't know what to do next...

 

[twoody54]

So is your problem that you can't reserve the address? Can you give it a static IP manually (via the LAN settings) then (192.168.0.10 and below)? If you have to you could always change the scope to allow for the extra address out of it.

Also, you don't necessarily need an extra IP from your ISP for this PC unless you're doing additional TS connections (perhaps to your SBS for administrative purposes).

 

[soe1]

How do I give it a Static IP Manually (via the LAN settings) I do have an address in the 192.168.0. range. Okay, I get what you are saying but I am completely new to this, I do appreciate your help!

 

[twoody54]

ok.. go to control panel/network connections then right click and go to properties of your LAN connection. Highlight Internet Protocol (TCP/IP) then click properties. Now you'll see a screen that will have "Obtain an IP address automatically" and "Obtain DNS server address automatically" Change those to "Use the following address" and type in the settings you need.

for example (don't use these as they're probably not the right settings for your network)
IP: 192.168.0.10 (put in proper address)
Sub:255.255.255.0 (put in proper subnet)
Gateway: 192.168.0.1 (put in proper gateway address)

DNS: 192.168.0.2 (put in proper DNS address(es)

 

[soe1]

ok...How does the other person connect to the Client PC?...Is there anything else that I must do?..

We have a Symantec VPN/Firewall Router......