Remote desktop, allow remote connections for some but deny remote for others

Discussion in 'Windows Networking' started by steve, Jun 15, 2007.

  1. steve

    steve Guest

    I use remote desktop to log into the server from outside the local
    network remotely.

    I have given some other people the ability to logon remotely by
    adding
    them to the Remote Desktop group.


    However I only want them to be able to log on locally eg from
    192.168.1.X ip addresses.

    How can I give some users the ability to log on using remote destop to
    the server locally but deny them access remotely from outside world.
    All the time letting me access it from the outside world.

    Regards
     
    steve, Jun 15, 2007
    #1
    1. Advertisements

  2. If you've a hardware firewall (eg Netgear FVS114) or use something like
    ISA Server, it will let you do this sort of thing: create a rule
    allowing access on a given port from one (static) IP address. I guess
    some firewalls can work with Dynamic DNS (eg DynDNS.com). Otherwise, I
    think you may be able to wrestle with IpSec within Windows - less than
    intuitive (to me at least!).

    Disclaimer: there are experts about these parts, and I am NOT one of them!

    Phil, London.
     
    Philip Herlihy, Jun 15, 2007
    #2
    1. Advertisements

  3. steve

    steve Guest

    mm I might be able to do something like that with the router. Not
    quite sure how to configure that into the router with dynamic dns.
    However my home ip as you have well said changes, my other IP is
    static. I could do some research on ipsec, I know its in linux never
    really thought of it in windows. I was hoping with all the settings
    and things in windows there would just be some microsofteze way of
    doing it.

    Thanks.
     
    steve, Jun 16, 2007
    #3
  4. steve

    Newell White Guest

    Can't you just deny the others VPN access to the LAN?
     
    Newell White, Jun 18, 2007
    #4
  5. steve

    steve Guest

    Im sorry I dont understand what you mean. Could you clarify.

    I want them to access the server locally over the network but not from
    the outside world through the router connected to the dsl line. But I
    do want the administrator to access the machine from both the local
    network and outside world.

    Regards
     
    steve, Jun 19, 2007
    #5
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.