Remote administration of small office via Internet possible?

Hi forum,
I am a sort of "administrator" (actually that one, who is always asked when there is a computer problem) within our small office group. But I am also very often on the road so I cannot help my workmates personally.
Our office Macs are connected to the inside and outside world via a Time Capsule. I consider buying an ARD license, but I am unsure if this would enable me to hop on my workmates' Mac screen when I am on the road and want to connect via internet.
Could you tell me if there is a way to accomplish this without buying new hardware or a subscription service?
Cheers,
Sven

If all you need is to be able to control another computer at your office from a remote location, then ARD would be overkill. Look into the freeware VNC. That will give you control capabilities and not cost you anything. You can find VNC applications for Mac here. Mac OS X 10.4 and 10.5 already have a VNC component to allow you connect to the system so all you'd need is the portion on the computer from which you'd be taking the control. Most people seem to find Chicken of the VNC still works well for them, though it's not been updated in a while. JollyFastVNC, though still in development, is another option that's looking quite promising. You will need to open and forward the appropriate ports (TCP 5900) to the internal IP address of the system in your office. If you need to connect to more than one system, you'll need to run a third-party VNC application, such as VINE, on the office systems to you can designate the port; ARD only uses 5900 which only allows one computer to be controlled through an NAT device.
Another option, if your users are all using Mac OS X 10.5, might be to use iChat. It allows screen sharing and isn't subject to the difficulties with IP addresses, network ports, etc. that arise when using ARD or any similar direct system control.
Hope this helps.

Similar Messages

Lumia 520 "Remote wipe of user data via Internet"

I'm interested in purchasing a Lumia 520 and read on the spec site that it can do "Remote wipe of user data via Internet" (http://www.nokia.com/in-en/phones/phone/lumia-520/specifications/).
Is there any special software that I need to be able to do this (like have it connected to a BlackBerry server in the case of enterprise BlackBerry devices) or is it as simple as stated on (http://www.noknok.tv/2013/05/02/how-to-find-your-lost-nokia-lumia-running-windows-phone-8/) where all you have to do is log into windowsphone.com where you can erase a linked phone?
This phone will be used for business so in case it is lost I need the ability te remote wipe it. Our company currently has a BB server and we all have BB devices, but with BB not doing so well I was thinking of getting a Nokia.
Thanks.
Solved!
Go to Solution.

WHNOKLUM520 wrote:
So far so good. That's great news. If I could ask one follow up question though:
Would it matter if the same SIM is installed on the phone? Lets say the 'thief' was able to get into the phone with a different SIM (if the security was not setup correctly) - would the phone be erased based on the SIM that's installed or on the IMEI number of the device?
Thanks
If there's no data connection, windowsphone.com cannot access your phone to send push notifications and if push notifications fail, then it will try to send SMS to your phone.
I just tried to ring my phone after taking out the SIM card, it was connected to wi-fi and I could ring it.
The silence will fall

Looking for a small project via internet (part time )

Hello!
I'm a beginer in labview with only one year experience in device programming (e.g.-power supply) and i search for some little project for develop my skills in labview.
I am available maximum 15 hours/week.
If someone is interested plese e-mail at [email protected]

You posted in the wrong forum. This one is for companies posting jobs. You want the one next to this one..

Just bought a 3TB Time Capsule for a small office. Will have 4 users with MacBooks. What would ne the best setup for time machine individual backups and internet sharing in a secure way?

Just bought a 3TB Time Capsule for a small office. Will have 4 users with MacBooks. What would ne the best setup for time machine individual backups and internet sharing in a secure way?

Set up each Mac for Time Machine backups in the normal way. Time Machine will keep each backup separate on the Time Capsule, so users will only be able to see the backups of their own Mac.
Yes....there are convoluted workarounds that might allow one user to see the backups of another.....IF...they know the administrator password of the "other" Mac.
As far as Internet sharing, all users will have access to the Internet if they have a wired or wireless connection. If a Mac connects using wireless, it is possible to limit the time that they are allowed to connect to the network.
For example, you might limit the ability to connect to the wireless from say each Weekday from 8 AM to 6 PM.
With a wired Ethernet connection, you cannot limit access times to the Internet.

Is it possible to access my TimeCapsule from outside my local network via internet? If so what is the best app that can help me?

is it possible to access my TimeCapsule from outside my local network via internet? If so what is the best app that can help me?

iCloud can do it..
http://www.apple.com/au/support/icloud/back-to-my-mac/
You need Lion and latest firmware on the TC..
Were you hoping to use the ipad/iphone?? That maybe possible but I am not sure how.
You cannot use windows without opening SMB to some strange port and this is going to mess with security.. you also need a static ip address from your ISP.. most private net users do not have this.
You can do it via vpn.. you will need to buy a vpn router and bridge the TC to it.
Just google remote access time capsule.. there are a zillion posts about it.

Is it possible to have a VI "run when opened" when accessed via Internet Explorer?

I am trying to get a remote panel application to "run when opened" when is accessed via Internet explorer. I have multiple remote panel licenses on the server and the VI is Re-entrant. The application works well except for this issue. Having the VI "Run When Opened" via IE is very important to the user. As is, when IE opens, the user must click on the panel image once to get the VI's attention and then again on the start arrow to run the program. Is there any way around this or a way to simplify the process?
Thanks.
Solved!
Go to Solution.

This is actually the intended operation of remote front panels, however, we can simplify the operation to meet closer with what your customer wants. Basically, if you were to always have your program run in somewhat of an idle state, you can use the Application Control>>Property node for 'RemotePanel.ConnToClients' property to determine when a user is connected and run the proccess of the program as soon as a connection is detected. When no connection is detected you could have the program run in an idle state. The attached screenshot shows a general way to do this. Have a good evening!
-Bob
-Bob
Attachments:
idle state.JPG ‏45 KB

How is possible change an administrator user to standar via terminal?

HI to all!
How is possible change an administrator user to standar via terminal (unix command)?
thanks a lot
Simone

Thank you Mr Hoffman!
i have found this command:
dscl . -append /Groups/admin GroupMembership shortname
it's working, what do you think about it?

Remote setup via Internet

Hi folks,
Could you please shed me some light where can I find relevant document re. remote setup/configure server via Internet. I have been searching on Wiki without result. I have no problem to setup/configure server remotely on Intranet via ssh. TIA
B.R.
satimis
Last edited by satimis (2008-02-17 16:26:00)

remote wrote:So many ways to do the same thing, makes it a challenge at times.
For your name check /etc/rc.conf and /etc/hosts
on /etc/rc.conf
changed;
HOSTNAME="arch"
to;
HOSTNAME="arch.satimis.com"
similar to that on /etc/hosts. Rebooted PC
Now
$ hostname
$ hostname -f
arch.satimis.com
Thanks. Is there any way avoiding a reboot?
On iptables it would depend on method, to know your IP, hopefully it's static.
iptables -A INPUT -s 192.168.255.48 -p tcp -m tcp --dport 22 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 22 -j DROP
iptables -A OUTPUT -d 192.168.255.48 -p tcp -m tcp --sport 22 -j ACCEPT
iptables -A OUTPUT -p tcp -m tcp --sport 22 -j DROP
$ cat /etc/iptables/iptables.rules
# Generated by iptables-save v1.3.8 on Sun Feb 17 07:00:44 2008
*filter
:INPUT DROP [3:96]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
:interfaces - [0:0]
:open - [0:0]
-A INPUT -p icmp -m icmp --icmp-type 18 -j DROP
-A INPUT -p icmp -m icmp --icmp-type 17 -j DROP
-A INPUT -p icmp -m icmp --icmp-type 10 -j DROP
-A INPUT -p icmp -m icmp --icmp-type 9 -j DROP
-A INPUT -p icmp -m icmp --icmp-type 5 -j DROP
-A INPUT -s 127.0.0.0/255.0.0.0 -i eth0 -j DROP
-A INPUT -s 192.168.0.0/255.255.0.0 -i eth0 -j DROP
-A INPUT -s 172.16.0.0/255.240.0.0 -i eth0 -j DROP
-A INPUT -s 10.0.0.0/255.0.0.0 -i eth0 -j DROP
-A INPUT -p icmp -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -j interfaces
-A INPUT -j open
-A INPUT -p tcp -j REJECT --reject-with tcp-reset
-A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable
-A INPUT -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DROP
-A INPUT -f -j DROP
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,SYN,RST,PSH,ACK,URG -j DROP
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -j DROP
-A interfaces -i lo -j ACCEPT
-A interfaces -i eth0 -j ACCEPT
-A open -p tcp -m tcp --dport 22 -j ACCEPT
-A open -i ppp0 -p tcp -m tcp --dport 80 -j ACCEPT
COMMIT
I'm running static IP here. I'll add your 4 lines at the bottom of the file, changing "192.168.255.48" to "192.168.0.52", IP addr of Arch.
Would there be any conflict to the existing rules? It seems there is no OUTPUT rule there.
re;
INPUT DROP [3:96]
what does 3:39 represent? Drop time? TIA
B.R.
satimis

Setup Lion Server for use in Small Office of Windows & Mac Clients

I've purchased a Mac Mini Server with Lion Server installed to be used in my small office of less than 10 people.
The primary goal of this server is to used for File Sharing, bother locally, and remotely.
In the process of setting up Lion Server I have come across a couple things that I am confused about.
The first is Open Directory.
It is my understanding that this is not a necessary setup for the number of users in my office, however I set it up anyway as it appeared to be something that would be useful in the future.
I have come across information that states Lion Server will not be accessible for Windows users connected via Open Directory. Thus my inclination is to disable the service, and set up my users as local users.
My question is, for local and remote File Sharing, is there any benefit to using Open Directory?
The second has to do with Remote Access.
I am familiar with the notion of a VPN, but I need some clarification as to my remote access options.
When I go to setup my Server's hostname, I am presented with three options. 1) Host name for local network, 2) Host name for private network, and 3) Host name for Internet.
I have a domain name for my company's website, so I set up a subdomain (server.mycompany.com), asked my ISP for a Static WAN IP, and pointed thesubdomain to said IP using my DNS. Thus this appears to be option number 3; to allow users to connect to my server from the local network, as well as the Internet.
My question is, how does this differ from a VPN both in setup, as well as method with which users will access the server? Is there a benefit to one over the other? I would Google this to find an answer, but I can't seem to find a name for what this setup is called.
I very much appreciate any help you can provide.
Thanks.

Well, I spoke too soon. Lion Server is unstable, awkward and is far too limited to qualify as an Apple product. Even though there's quite a few enhancements, the omissions of technologies in the server 10.6 edition makes this "server" a no go for us.
Even after installing mysql, I still cannot run a Joomla website on Lion server as it should be done. The wiki's a nice thing to have, but isn't a "professional grade" solution. There's too much iOS as well.
With that said, I think it's a shame that apple would put customers through so much frustration and disappointment by releasing such a lame product. In order for us to use Lion server, we would have to be able to run a second (totally separate) instance of Apache. It also appears that server settings are changing to the extent that services become inaccessible as the system is running.

What "ethernet port" does airport utility use for "remote administration"

I have a friend who was recently evangelized to Macs and bought a Macbook Pro and an Apple Airport Extreme (gigabit) Router, hereinafter called AE. The place where he lives has cable modem internet access and an older Linksys wireless-G router for the building, and I am trying to configure his new AE, prior to making it the primary router in the network (e.g. connected to the cable modem).
When the AE is completely configured the Linksys will be retired.
I remotely manage and maintain the network and some other computers in that house. The Linksys is configured for Remote Administration so I can manage it. I manage several PC's and Macs using Timbuktu Pro 8, with the necessary ports forwarded through to TB2 on those machines.
I am trying to configure the Airport so it also can be managed remotely, so from a workstation on that network (accessed from where I am using TB2) and running Airport Utility, I have checked "Allow setup over WAN" on the Airport/BaseStation page. Now I would like to test whether I can connect and remotely administer that Airport Extreme from Airport Utility on my Mac.
I assume that, if I can rout packets from my Airport Utility here through the internet to the public IP of the Linksys router there, I should be able to connect. But I can't.
My setup is this. The target AE has its WAN port connected to an ethernet port on the Linksys, as is the LAN in the remote building. Nothing is connected to the AE's ethernet ports at this time. The Linksys is the DHCP server, and the AE has an IP from it, as does all the other ethernet- and wireless-connected computers, printers, etc. The AE's wireless is active and the wireless-connected devices in the building can connect to either its base station or to that of the Linksys. When the Linksys is retired the AE will be the only wireless in the building.
I attempt to connect in the following way: On my Mac, I run Airport Utility. From the file menu I select "Configure other" and enter the public IP address of the remote Linksys, and give AE's password. There is a long wait
Reading the Airport wireless device configuration....
while Airport Utility tried to discover AE, and then
An error occurred while reading the configuration..... (-6753)
I suspect that my remote connection problem is due to the fact that the AE is behind the Linksys, and the proper port forwarding is not in place on it to pass the Airport Utility's packets through to the Wan port of the AE. This might be that I have not entered into the Linksys the correct port number to forward on to the AE. I've tried the three numbers in the list:
"Well known TCP and UDP ports used by Apple software products" found at
http://support.apple.com/kb/ts1629
that are mentioned as possibly being involved with Airport Utility; 192, 4500 and 5009.
Advice will be appreciated.
Bob

One example, and there may be others, is the (free) DynDNS dynamic DNS service which publishes a domain name for the WAN port of your router which can then be resolved, like all other domain names, to the actual IP address of the WAn port of your router. This service provides a solution to the problem of having a proper domain name in cases where your public IP address changes over time. Unless you pay for a static IP address, virtually all ISPs change your public IP address over time.
So, you can register for a free DynDNS account at www.dyndns.com and that is how you come up with the User: and Password: information; use whatever User and Password you register at dyndns.com with.
The first part of the hostname you can define as you wish, subject only to someone else having used it previously, and the remaining parts of the domain name might be "dyndns.org" or one of the other domain names provided by the DynDNS service. So, you could publish, via DynDNS, the name of your public IP address as, for example, joehlam.dyndns.org however you might want something less descriptive or more vague.

Small office network questions

I have a small office with 4-5 mac computers. I have a Mac mini set up as a file server and I use a standard cable connection for my internet service. I use a wired router (ethernet cables) all going to a netgear switch.
Just bought a mac mini and a drobo storage device. I have successfully set up the drobo on the mac mini and I can "see" the files and read & write to the external drive. I also have a few other people in the office -- which will need access to the drobo via the network, but have a few questions there:
1. I don't see the name of the other computers that can connect to the unit. When I get on one of the other machines and look for the drobo I can find it & edit files but from the mac-mini side, I can't see the proper name of the other computer. How do I do this?
2. Can I limit which folders are accessible within the drobo that attached to the mac mini
3. Am I missing anything from a safety standpoint? Can Anyone come into my office and access the files that are on the mac/mini drobo? Worse off, is the mac mini vulnerable to the outside world with this setup?
Thanks for the help, new to all this networking stuff.

It's been a week, so i don't know if you have already worked this out, but...
while I am not familiar with your router, when I have used linksys before, i find it better to use static IP addresses for everything. Try setting static IP addresses and make sure everyone's mask is 255.255.255.0. Some routers also have a flag to allow computers to see each other.
Best of luck.

Connect Oracle e-Businss suite 11i or r12 via internet

Hello,
I have question regarding accessing Oracle e-Business suite (11i or r12) via internet from remote location.
We currently have e-business suite accessed by VPN connection from remote location.
I would like to know if possible to configure Oracle e-business suite that user can access them via internet.
Just as end users can access web based time card such as ADP site, where everything is located on ADP server and
subscribing company employees access them via internet.
thank you in advance.

Paul,
Please see "USE EXTERNAL WEBTIER IF EXPOSING ANY PART OF EBS TO THE INTERNET" section in:
Secure Configuration Guide for Oracle E-Business Suite Release 12 (Doc ID 403537.1)
Secure Configuration Guide for Oracle E-Business Suite 11i (Doc ID 189367.1)
Thanks,
Hussein

1 small office + 2 companies + shared resources = ? (SG300, SA520, WAP2000)

I need to configure a network in 1 small office space that segregates 2 company domains but allows them to share an Internet connection, a WAP, a couple of printers, and a non-Cisco VoIP phone system. And, it needs to provide guest access to the internet and printers via wireless. I have a SG300-28P, an SA520W, and a WAP2000 to make it all happen. Here's the plan below. Will this work? Is there a better approach that uses the available equipment? Thanks in advance!!!
VLANs:
VLAN 1 - default, mgmt vlan, 192.168.1.0
VLAN 10 - CompanyA-Data, 192.168.10.0
VLAN 20 - CompanyB-Data, 192.168.20.0
VLAN 30 - Guest, 192.168.30.0
VLAN 50 - Printers, 192.168.50.0
VLAN 100 - Internet, 192.168.100.0
VLAN 200 - Voice, 192.168.200.0
Device IPs:
SG300 = 192.168.1.254
SA520 = 192.168.1.1
WAP2000 = 192.168.1.245
DHCP Servers:
VLAN 10 = SBS-A
VLAN 20 = SBS-B
VLANs 30,50,200 = SA520
VLAN 1,200 = NO DHCP
Wireless:
SA520 is primary, WAP2000 is repeater (will it repeat multiple SSIDs???)
SSIDA - VLAN10
SSIDB - VLAN20
SSID-Guest - VLAN30
Switch Ports:
SG300:
1 = trunk, VLAN 1
2-6, 25 = access, VLAN 10
7-12, 26 = access, VLAN 20
13 = access, VLAN 30 (unmanaged switch providing additional ports)
14 = access, VLAN 50 (unmanaged switch providing additional ports)
15-23 = access, VLAN 200
24 = trunk, VLANs 10, 20, 30 (connect to WAP2000)
27 = unallocated
28 = trunk, all VLANs (connect to SA520 p4)
SA520:
1-3 = access VLAN 1
4 = trunk all VLANs (connect to SG300 p28)
Routing:
SG300 in L2 mode using SA520 as router on a stick??

Hi Rick,
This is a great question that our Partner Design Support team can help you with. Please go here to start chatting with them:
https://supportforums.cisco.com/community/netpro/small-business/partnerzone/pds
Refer the engineer to this post so that they can see what you have.
Regards,
Cindy Toy
Cisco Small Business Community Manager
for Cisco Small Business Products
www.cisco.com/go/smallbizsupport
twitter: CiscoSBsupport

WRT54G version 6 - router setup screen via Internet Explorer 7 doesn't display correctly

Hi,
I've just set up my WRT54G router. I'm able to connect to the internet and I'm able to connect directly to the router via IE but the setup screen doesn't display correctly. I've tried resetting the computer and updating the firmware but it still doesn't display correctly. Almost all of the text is missing except for the Linksys logo and a few drop down menus. Any help/suggestions would be great, thanks.

Hi gang,
There a number of things that you can do to solve this problem but most of them involve changing the rules that you have already configured in your ZoneAlarm profile. My preferred solution is to:
-unplug your router from the WAN (why not?)
-turn off zone alarm
-access your router's administration page at http://192.168.1.1
-find the admin page where you can switch admin access from http to https
--- **save your changes !!**
-reboot your router
-plug the WAN cable back into your router
-turn ZoneAlarm back on
-access your admin page at https://192.168.1.1 ( note the 's')
Bob is your sister's brother! Your admin page should work as it is supposed to. Your router and ZoneAlarm should be playing nicely together. You haven't borked your finely tuned zonealarm rules. You were going to bookmark your admin page anyway, and if you want to allow remote administration, you would want to use https anyway. Nothing is broken and you fixed two things. "Its a good thing."Message Edited by ubuibi on 12-27-200609:10 AM
There are really only 10 kinds of people in the world;
Those who understand binary and those who don't.
ubuibi

Air Port Extreme Remote Administration?

Is it possible to administer the Air Port Extreme remotely?
My Linksys router has been doing OK lately, but have been noticing issues like speed latency. I think this is true not only since another B or G Wifi device connected to the router causing the rest of the speeds to decrease, but also since I moved into a location that has many WiFi hotspots - specifically my condo complex. My conclusion is buying a dual band wireless router which probablt has a larger WiFi range too. I am debating on whether or not to buy the Apple Air Port Extreme Base Station or one of the top 3 Linksys E Seriers routers (E2500, E3200, E4200), since I have 2 iPads, an iMac, 2 iPhones, 2 Apple TVs, 2 Windows 7 laptops, 1 Windows XP desktop, XBox 360, Nintendo Wii, and 2 WiFi enablesd Blue Ray Players. I saw that I was able to access all of the devices with the Air Port Extreme Base Station - great! Air Port Extreme Base Station works great with all of the Apple devices, stops latency slow WiFi speeds and can have a USB hub attached to allow for a printer, multiple HDs [Time Machine Backups, YAY], etc. I am leaning towards the Air Port Extreme Base Station, but have two reservations:
(1) WEB BROWSER: I cannot administer the Air Port Extreme Base Station via a web browser and am forced to install the software and
(2) REMOTE ADMINISTRATION: I cannot make any changes to the Air Port Extreme Base Station remotely, say if I'm at work, forgot to open a few ports and NAT/PAT, to access my computer.
I would buy the Air Port Extreme Base Station if I can at least get through one of these two reservations.
Please help.

<Yes, the newer AirPort Extremes running 7.4.1+ firmware, can be administered from a remote location ... of course, you would still require the AirPort Utility to do so.>
I am looking to set up remote access to my Airport Extreme that is running the latest firmware. Can you describe what I need to do to do so? I do not have a static IP so will have to use something like DynDNS I assume. My needs are pretty simple. From time to time my Airport drops out (I'm guessing after a power outage) and while the Cablevision modem restarts, my Airlort is often left flashing orange. This would be fine except that this is all at a weekend house that is 90 miles away and I need the wifi to be working so that I can access my Nest thermostat as well as my Insteon system for remote light management.

Remote administration of small office via Internet possible?

Similar Messages

Maybe you are looking for