Remote Desktopping/VNC

Peerzy · 31 Jan 2011 at 15:06

Small issue,

I'm helping out a company - they have 2 sites about 10 minute drive away with 2 completely different systems. Not a problem but they hate emailing/memory sticking files to go from one site to another.

About 5 users from each site need to be able to access documents on the other sites servers and visa versa.

Best way of doing this? Needs to be secure, they want to be able to basically login to the server/PC on the other site, grab whatever files they need and that's it.

I was considering just setting them all up with Windows Remote Desktop thingy as it's pretty easy, but I've used VNC along time ago and that was good.

Must be free - they have no one to spend on this one.

Ideas?

Thanks

Priapus · 31 Jan 2011 at 15:49

Why not just user a VPN connection to the site - then get users to just open up shared documents from their pc to the server?

So, VPN to Site A.
Start - run - \\servername\shared folder - and mount it to My computer so they don't have to type it in all the time.

Then next time the want to access it - all they need to do is connect to VPN - double click on mapped network drive,

Nice and easy.

Peerzy · 31 Jan 2011 at 16:07

What VPN software (that's free) would you suggest and how easy is it to setup. This sounds exactly what I'm after but tbh I've never done multi site stuff before so never looked into it.

I know how to do the mapping network drive etc and that's fine just the VPN bit.

Priapus · 31 Jan 2011 at 16:12

Windows has built in VPN feature. What OS are the users mostly using?

Normall - go to network settings and create / setup a new network connection and select VPN from the list.

The server will have to have port 1723 open as well as the router to accept the VPN connection. Also, all users must have VPN access on the server. Which server OS are you running?

Edit - nevermind read it wrong. You know how to map a drive - so all good.

Peerzy · 31 Jan 2011 at 16:28

All users will be running Win XP Pro, servers are running Windows Server 2003. Hmmm I'm not sure how much access to the ports I have as it has something called Edutec Classmaster 2006 software on it (to manage and run the educational network). I think the main stuff they need is on the seperate ADMIN server running Win2k3Server.

How would I go about checking and opening these ports and how do I give users VPN access on the server? Usually I'd just change user type but is it different?

SiriusB · 31 Jan 2011 at 17:47

As above, you need to have the router forward VPN connections on port 1723 onto the server machine acting as the VPN server. Some routers also require you to activate GRE, though most routers I have seen do this automatically when you open 1723. The exact steps depends entirely on your router.

Once you have that done you need to turn on VPN on Server 2003. Quite easy and pleeeeeenty of guides out there.

You will need to make VPN users members of the Mobile Users security group. The description should mention VPN access.

Raumarik · 31 Jan 2011 at 20:37

You might want to check the net connections at the sites before setting anything up as the upload at each site will dictate the speed anything will work at.

SiriusB · 31 Jan 2011 at 20:51

Good point. VPN is only really useful if transferring small documents on slow links and accessing email. Anything larger and you will need to find another way or improve the net connections.

Raumarik · 31 Jan 2011 at 21:05

We've been using Riverbed Steelheads for WAN optimisation if it's any use, quite expensive but they are utterly brilliant

Even include a cache you can sync so the files are local, but copied off a share on the other site, if you read it takes from cache, if you write it sends it back to the actual share. Very clever and real time optimisation of traffic is exceptional when compared to WAAS.

Scon · 31 Jan 2011 at 21:07

Have a look at some software called "TeamViewer" It's VERY easy to use and is really fast. (well from Newcastle to Manchester it is)

Peerzy · 31 Jan 2011 at 23:41

Files should be small, nothing more than 20mb I would have though as it's all word and excel stuff.

The sites both have dedicated internet connections, one is getting a dedicated fiber in a few months so speed shouldn't be an issue.

Just to clarify - no money at all for this, they don't have anything in the budget. If it's slow then they will just live with it.

SiriusB · 31 Jan 2011 at 23:57

For office documents then the VPN will be fine. Though obviously a lot of people connecting at once will have an impact. Actually, depending on your routers, not everyone may be able to connect at the same time!

Priapus · 1 Feb 2011 at 05:35

Peerzy said:
Files should be small, nothing more than 20mb I would have though as it's all word and excel stuff.

The sites both have dedicated internet connections, one is getting a dedicated fiber in a few months so speed shouldn't be an issue.

Just to clarify - no money at all for this, they don't have anything in the budget. If it's slow then they will just live with it.

No money required. Completely free with the built in windows VPN features.

Peerzy · 1 Feb 2011 at 09:08

SiriusB said:
For office documents then the VPN will be fine. Though obviously a lot of people connecting at once will have an impact. Actually, depending on your routers, not everyone may be able to connect at the same time!

There will only be a few people using it, maybe 2-3 at once.

Ice On Fire said:
No money required. Completely free with the built in windows VPN features.

Just wondering if you had any answers to this:

Peerzy said:
All users will be running Win XP Pro, servers are running Windows Server 2003. Hmmm I'm not sure how much access to the ports I have as it has something called Edutec Classmaster 2006 software on it (to manage and run the educational network). I think the main stuff they need is on the seperate ADMIN server running Win2k3Server.

How would I go about checking and opening these ports and how do I give users VPN access on the server? Usually I'd just change user type but is it different?

?

Cheers

Sp00n · 1 Feb 2011 at 10:01

Set up an IPSEC connection between the 2 sites and you'll be good to go.

Priapus · 2 Feb 2011 at 08:28

Peerzy said:
Just wondering if you had any answers to this:

?

Cheers

Sorry for the late reply.

Sure - you open up the AD (Active Directory) where all your users are on the server. Then, lets say for Mr. Smith - you right click and go to properties - from there - click Member Of tab at the top. Add in a group called, Mobile Users.

This will give that user VPN access. Also make sure dial in access is allow. It should be as by default it is allowed.

Peerzy · 2 Feb 2011 at 11:50

Ice On Fire said:
Sorry for the late reply.

Sure - you open up the AD (Active Directory) where all your users are on the server. Then, lets say for Mr. Smith - you right click and go to properties - from there - click Member Of tab at the top. Add in a group called, Mobile Users.

This will give that user VPN access. Also make sure dial in access is allow. It should be as by default it is allowed.

Cheers, makes sense and thought it would be something like that. With the two sites being a short drive away I'm going to setup one site first then drive to the other and do that one, is this possible or do I need to have them both being setup at the same time?

I don't have any of the site details (ip address) either till I arrive.

Priapus · 2 Feb 2011 at 14:52

One at a time is fine.

Just make sure ports are open, you have IP addresses and users have VPN access. You should be ready to go after that.

Good luck.