RDP - Exchange 2003

PatBateman · 16 Oct 2007 at 15:34

Hi,

Have just installed NetScreen remote to give me access to domain controller and active directory controller away from the office and I was wondering is it possible to RDP from one of the servers onto a computer that is on the network. Obviously I know that this computer will have to be on and logged into the network.

Many thanks in advance for you assistance.

Stelly · 16 Oct 2007 at 15:40

yes you can do it all the time

Stelly

PatBateman · 16 Oct 2007 at 15:40

Stelly said:
yes you can do it all the time

Stelly

Would you like to tell me how

sidethink · 16 Oct 2007 at 15:49

RDP or VNC or whatever from your local machine to one that you can ping on the far end of the VPN.

If the VPN is setup right then there really isn't anything different to using it across a LAN.

Netscreens are notoriously quirky about how they segregate traffic crossing the firewall (but they are great firewalls). You may need to look closely at what target IP ranges and ports are permitted for connecting VPN clients.

Stelly · 16 Oct 2007 at 15:53

Are you using a VPN?

Stelly

sidethink · 16 Oct 2007 at 15:54

Netscreen Remote is the VPN client for Juniper firewalls - its mentioned in the OP.

Pushing this on a little further - have you been able to RDP to the two Domain Controllers you mentioned in your OP? Does that bit at least work?

PatBateman · 16 Oct 2007 at 15:55

The computers I would be connecting to have dynamic IP's (within a given range) but I do know the computer names if that helps

Stelly · 16 Oct 2007 at 15:57

just nslookup the names and connect to them using RDP

sidethink · 16 Oct 2007 at 15:59

Aye - that would do it.

Just use a list of the actual machine names and your DNS/WINS should take care of the rest.

Failing that if you need to know the IP address, do an Nslookup or if you need a GUI, open the DHCP console and look in there.

PatBateman · 16 Oct 2007 at 16:05

sidethink said:
Netscreen Remote is the VPN client for Juniper firewalls - its mentioned in the OP.

Pushing this on a little further - have you been able to RDP to the two Domain Controllers you mentioned in your OP? Does that bit at least work?

Yes have been able to get onto the servers no problem but cannot rdp from them onto any of the terminals.

sidethink · 16 Oct 2007 at 16:09

Ok- can I assume you are now trying to RDP from one of the DCs (using the RDP program on THAT server) with the machine name of PC in question?

Can you ping the target machine from a command prompt inside the RDP session (not on your local machine)? Can you ping the IP address and machine name?

Stelly · 16 Oct 2007 at 16:11

have you set up the terminal to use RDP?

Stelly

PatBateman · 16 Oct 2007 at 16:14

Stelly said:
have you set up the terminal to use RDP?

Stelly

Yes have set up under active directory - computers - properties - dial in -allow access

PatBateman · 16 Oct 2007 at 16:20

sidethink said:
Ok- can I assume you are now trying to RDP from one of the DCs (using the RDP program on THAT server) with the machine name of PC in question?

Can you ping the target machine from a command prompt inside the RDP session (not on your local machine)? Can you ping the IP address and machine name?

Hi cannot ping any of the machines from the servers either by name or ip address

sidethink · 16 Oct 2007 at 16:33

If you are remote controling the desktop on one of your DCs and using the command prompt inside that RDP session (not launched locally on your PC), then you have an issue between your DC and the target machine that is unlikely to be caused by your VPN.

I know I'm hammering home the point but you're certain that you are using the remote command prompt to test connectivity and not the command prompt on your home machine? Its easy to use the wrong one with RDP and if you are unaware of the significance you'll get very strange results.

oddjob62 · 16 Oct 2007 at 21:11

PatBateman said:
Hi cannot ping any of the machines from the servers either by name or ip address

Firewall on the workstations?

IAmATeaf · 16 Oct 2007 at 21:33

2 problems, you need to sort out why you can't ping the workstations and secondly don't you need to enable remote access on the workstations?

sidethink · 17 Oct 2007 at 09:34

Correct on both counts - you need to try this back in the office and make sure you can simulate locally what you are trying to achieve remotely.

Go to one of the DCs and try and ping the workstations. Try and open an RDP session to them.

You may need to enable Remote Desktop on the target workstations.

Looking back over the posts, I'd be very surprised if you can't ping the workstations from a DC, locally or logged in over RDP - that would be a wierd environment.