New to server, need VPN for remote desktop and file share...

I've set up server and have the VPN working, I think, I need to have several outside systems join the servers VPN permanently to allow for file sharing and remote desktop. I don't want the "normal" internet browsing to go through the VPN (huge slow down) I have read that a "split DNS" or "split tunnel" is what I need, then to disable "send all traffic over VPN connection" option on each remote system. I was a little confused after reading on how to do this on Leopard server (the only instructions I found) but have absolutely no idea on how to do this on Snow Leopard server (the server I set up is 10.6) any assistance would be great, thanks in advance.

Server Admin, VPN, Settings, Client Information, Network Routing Definition.
Here add a private network record type that matches your LAN/VPN ip.
For example
IP Address: 192.168.0.0
Mask: 255.255.255.0
Type: Private
You can find more informations about this feature in Snow Leopard Server documentation:
http://images.apple.com/server/macosx/docs/NetworkServices_Adminv10.6.pdf
search for "Configuring VPN Network Routing Definitions"

Similar Messages

Help in setting up VPN for Remote Desktop

Hi,
We recently purchased a Cisco RV220W VPN Router and want to set up VPN connections for about 10 users(employess) to connect to their work PCs (mostly win 7 & win 8) from their home computers (windows & mac) using Remote Desktop. The documentation is quite poor. Can anyone point me to a tutorial and/or help me out with steps and settings? From the Admin Guide, it looks like I should be configuring Remote Access with an IPsec Client, but it's not clear how to handle/route multiple machines?

Hi Ray,
You can use the QuickVPN client to connect up to Windows 7 PCs. Windows 8 is not supported as of yet.
For Windows 8 and Mac you can create PPTP users or try a third party VPN client like Shrewsoft (Windows) or IPSecuritas (Mac). You also have the SSL VPN option in the RV220W. Please note that the third party clients are not officially supported by Cisco.
There are some good instructions for setting up Shrewsoft with the SA500 which is similar to the RV220W here:
https://supportforums.cisco.com/docs/DOC-9378#comment-7216
IPSecuritas for Mac:
http://www.cisco.com/en/US/docs/security/multi_function_security/multi_function_security_appliance/sa_500/technote/note/SA500_mac_appnote.pdf
Please reply if you have any questions.
- Marty

How do you allow SQL Server 2014 Express for remote connection and in firewall?

I'm sorry if this was answered here before.
I installed SQL Server 2014 Express and it is working perfectly. I want my server to be accessed through LAN. It is a named instance.
I searched the internet and here's what i did:
1. Through the SQL Configuration manager, I enabled all the Protocols of my Instance (TCP/IP, Named Pipes and Shared Memory). I changed in the IP Addresses the "IP ALL" TCP Dynamic Ports to 1434.
2. In the Firewall I made an Inbound Rule to allow the Program (%ProgramFiles% (x86)\Microsoft SQL Server\MSSQL12.MyInstance\MSSQL\Binn\sqlservr.exe)
3. I also made 2 Inbound Rules to allow (TCP/IP Port 1433) and (UDP Port 1434).
4. Restarted my instance. SQL Server Browser and SQL Server Reporting Services are also running.
5. No Luck I cant still access the server using a different computer in the network.
Please help.

Hello,
In Express Edition by default remote connections are disabled, you have to enable it first:
Configure the remote access Server Configuration Option
It's always a two way communication, so you have to create also outbound rules, not only inbound, and this on server as well as on client side; see
Configure a Windows Firewall for Database Engine Access
Olaf Helper
[ Blog] [ Xing] [ MVP]

I have a time capsule connected directly to fiber connection. I have connected a windows server directly to TC and configured it for remote desktop connection. From my interanet I can access srvr but not from my home. What config I need on TC?

I have a time capsule directly connected to fibre optic point out. All pcs and macs are connected wirelessly to the internet. I have connected a windows server pc to TC. When configured for Remote desktop connection, I can access windows server from within interanet but don't know how to access it from internet. I guess I need to change some settings in TC to get some ip adress for the remote desktop connection from my home. Anyone who can help me out? Appreciate it.
Narmin

I am a little lost now.. I have read again your title and your first post.. and they seem inconsistent.
In the title you state.
From my interanet I can access srvr but not from my home.
Interanet is not a word I know.. I assumed intranet...are you talking about internet or intranet? And just to be clear say WAN or LAN.. !! Is your home part of the interanet??
In the first post you state,
I can access windows server from within interanet but don't know how to access it from internet.
Now this is more normal.. the issue is not in the home at all, it is accessible from there but fails from internet. If this is correct, then you can do a few obvious things to determine where the problem is.
But first I need to know are you actually testing from a different internet connection to your home lan.. you are not just trying the public IP from inside the LAN as that will fail due to the TC not doing NAT Loopback.
I am also assuming the TC is the only router in the network, and has the public IP on the WAN interface.
And I am also assuming you have turned on the ping responder and you can actually ping your public ip from the internet and get a response. This helps no end in figuring out where there are issues. Strange but I have no idea if there is a ping responder in the TC WAN so you might need to forward that as well. Also if you have a dynamic public ip address are you using dyndns or no-ip or some other service to connect.
1. Test bypassing the TC.. plug the internet connection straight into the windows server,, and test if you have access. If yes, the TC is the problem.. if not, your setup on the windows server is wrong.. look at firewall in particular.
2. Assuming from test 1 the TC is the problem, Post the screen shots of the port forwarding setup for us to look at.. that is by far the easiest way to check it out.
There are lots of references to port forwarding in the TC.. eg
http://must-know-mac.blogspot.com/2008/07/how-to-port-forward-time-capsule.html
The things that generally go wrong are firewall on the computer that is accepting the port.
The ISP doesn't allow connections on a particular port. (not likely in your case)
The router is behind another router.. double NAT will kill any port forward.
Upnp has already allocated a port.. not an issue as TC doesn't use upnp although a reboot of everything after you set port forwards is well worth it.. amazing how things don't stick properly without a reboot.
IP on the receiving device is not static and so changes.
Not enough or right type of ports are opened. This is always messier than it looks as one port is often not enough for two way communications.

Web Access for Remote Desktop on Windows Server 2012

Hello,
i've a Windows Server 2012 without a domain. So i installed the remote desktop session host, the remote desktop license server and the remote desktop gateway as a server role only. All is working fine. Without a domain, no management tools for remote
desktop are available. So i configure the remote desktop via the registry. I define (via registry) some remoteapps, too. All values are copied from a running Windows Server 2008 R2. So the remoteapps are runing.
Now i want to use the new Microsoft Remote Desktop client for Android. To use a remoteapp i must define a remote resource. To define a remote resource i need a url to the web access for remote desktop. So i installed the web access. But if i login to the
web access, i don't see any remoteapp. What's wrong? I've set the ShowInTSWA to 1. What must i do to access an existing remoteapp via web access?
Martin

Hi Martin,
Server 2012 RD Web Access is designed to retrieve published RemoteApps and Desktops from a Server 2012 RD Connection Broker and/or a Server 2008 R2 RD Session Host server. From your description it doesn't appear that you are using either of the above.
I know it is a more complicated set up, but you should consider having a domain, creating a RDS deployment, etc., so that you can use the full featureset as it was intended. You can do it all on a single server if needed. For Server 2012
there is a hotfix that needs to be applied to permit RD Connection Broker to work on the same server instance as active directory.
-TP

Group Policy for Remote Desktop Users

Hi,
Currently my users use desktops and have user and computer GPOs applied (typical things like logon scripts etc.) at the OU level where they reside e.g. Finance Users, Sales Users etc.
I am planning a Remote Desktop 2012 environment.
I have read the following:
TechNet cc779327
So, my understanding is that I create a new OU for my Remote Desktop Server only (not users), and create a new security Group for my RD Users and a security group for my RD server.
Remote Desktop Servers OU
* RD User GPO (filter on RD User security Group and RD Computer Security Group)
* RD Computer GPO (filter on RD User security Group and RD Computer Security Group)
I then apply all computer settings to the RD Computer GPO (loopback processing, Windows installer, hide shortcuts etc.).
I then apply all user settings to the RD User GPO (app specific, templates etc.)
Why not consolidate the two GPOs into one?
If I set computer settings in the computer GPO, and apply it as above to filter to the RD Server group and RD Users Group will this apply to only users un the RD User Group...or ALL users since I added the server to the filter?
If a user currently gets a setting in their normal OU e.g. Finance logon script, will they still get it on the Remote Desktop? Or do I need to copy that GPO setting to my new RD User GPO also?
Am I right to add both RD Server and RD User groups to the filter on both RD User and RD Computer GPOs?
Loopback processing - merge or replace typically for Remote Desktop?

Hi,
Thank you for posting in Windows Server Forum.
Create OU for RDS Server in Active Directory. Create security group for users who will use Remote Desktop Host (i.e. RDS Users). Create GPO (i.e. RDS Server Lock Down). In Security Filtering delete Authenticated Users, add RDS Server Account, and the security
group created in previous step.
Please check beneath article might useful for better understanding.
Lock Down Remote Desktop Services Server 2012
How to secure your remote desktop server with GPO
Hope it helps!
Thanks,
Dharmesh

Apple Remote Desktop and controlling over VPN

Hi All,
I had a question about whether something was possible and if so if someone could point me to instructions/how-to on setting it up.
I have three Macs I am administering. One is an iMac that stays in the office on the network. Two are MBP's. One is always at a remote location, the other comes in and out of the office. I work remotely administering the server and the three systems. I have the latest version of Apple Remote Desktop and obviously can access the server fine. I was wondering though if there is any way besides having the person give me their IP address every time that through the VPN I can see their system, then access it in Remote Desktop just like we are on the network together? Basically they connect to the network via VPN if they are remote and I do the same thing and then access their machine.
I hope that makes sense. I went through different parts of the guide for ARD but didn't come across a method like that described in there.
Anyone with opinions? Thoughts? Chants of I'm an idiot? haha
Thanks

Yeah for some reason I cannot get this to work right. Even if I scan the 5 VPN IP's I have setup I cannot see their machines when I am connected to the VPN. I tested it the other day by connecting one of the systems to an outside internet connection, then logged it into the VPN. I then connected my own to a different source and logged into the VPN, but Remote Desktop just won't find it.
Just not sure why it doesn't work. I can see the computers on our internal network though, just not any connected via VPN.

Best program for remote desktop?

Coming from 10+ years of Windows, the thing I miss most is the ability to remote into my computer remotely.
Mac does come with a version of VNC, but I've never had good luck with VNC, it's usually very slow (even after adjusting colors/settings). I could use VNC on my local lan and it's still dog slow.
They also have their Commercial Remote Desktop product, but it seems geared towards IT companies who need to manage multiple macs and push updates, etc.
Is there any software out there that works similar to Remote Desktop for Windows that's not VNC? I've also tried LogMeIn and some other various online services, nothing really compares to Microsoft's Remote Desktop and how smooth it is.

Mac to Windows, use the above mentioned Microsoft Remote Desktop Connection, or CoRD
Mac to Mac use Screen Sharing, it is based on VNC, but Apple's client and server when talking to each other is better than generic VNC. If you are connecting Mac to Mac over the internet, then use the Back-to-My-Mac feature in iCloud. On the same LAN Screen Sharing is easy.
TeamViewer.com is good at remote connections across the internet, and it is cross platform.
LogMeIn is OK, especially if going from Windows via Internet Explorer as it then uses DirectX enhancements to make the client fast. Going from a Mac via Safari to a LogMeIn system is OK at best, but not all that great (TeamViewer.com is better - personal opinion).
If you have to go from Mac to Unix/Linux systems, then look at Chicken (formally Chicken of the VNC), or JollysFastVNC. These VNC clients will play nicer with non-Apple VNC servers than Apples Screen Sharing VNC client.
If you have to go from Windows to Mac, then you need a VNC client, and you may or may not experience problems with the Mac VNC server, as it does not always play nice with 3rd party VNC clients. If you have the need, and TeamViewer.com or LogMeIn.com does not satisfy your needs, then you might look at the Vine Server (aka OSXvnc) as it does play nice with 3rd party VNC clients.
There is nothing magical about the Apple Remote Desktop with respect to screen sharing. As you have figured out it is for managing a class room or office of Mac, besides that it does not offer that much for a single user (or even a family where there are only a few systems).

Remote Desktop and Snow Leopard Server

What is the best way to use Remote Desktop with Snow Leopard Server?
I purchased a mac mini with snow leopard server and Remote desktop so I can easily manage my 11 computers, install and upgrade software etc. etc.
The mac mini server will basically be nothing but a server.
I will use as my main computer a mac pro. Do I need to install Remote Desktop on the server and on my mac pro? What is the best way to deploy the services of Remote desktop and mac os x server?

You install Apple Remote Desktop on the machine you want to control from. In this case, install on your Mac Pro. All you have to do on the clients (controlled Macs) is enable remote management in the System Preferences under Sharing. Just make sure that all your controlled Macs are up to date on their ARD version (v3.3.2) which can be taken care of from Software Update.

Remote Desktop Service Manager - configure permissions for Remote Desktop Users to Send Message, Disconnect, Logoff

Hello, dear colleagues.
We are using Windows Server 2012 R2 as Remote Desktop Server. Also use Windows Server 2008 R2 with Remote Desktop Service Manager to control RDS user sessions (Send Message, Disconnect, Logoff, Query Info).
Send Message, Disconnect, Logoff options works only for users in Administrators group.
I can't to configure permissions for Remote Desktop Users, specific user or AD group.
To set permissions I'm running RDS Host Configuration on Windows Server 2008 R2 and connect to Windows Server 2012 R2. Then double-click
RDP-Tcp, Security tab, add specific user account , AD group or configure
advanced permissions
for Remote Desktop Users.
But, as I sad above, these options works only for users in Administrators group. How to make it work for Remote Desktop Users or specific user, AD group?
Thanks.
P.S. If move specific user from Remote Desktop Users group to Administrators group on
Windows Server 2012 R2 - it works.

Hi,
You can prevent administrators from changing the permissions for a connection by applying the
Do not allow local administrators to customize permissions Group Policy setting.
This Group Policy setting is located in Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security
Apart there is one command with which you can set the permission for that check the related
article. Additionally checkthis
thread for more detail.
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Error when uninstalling App-V RDS client: Product: Microsoft Application Virtualization (App-V) Client for Remote Desktop Services 5.0 Service Pack 2 x64 -- Error 1324. The folder path 'C:' contains an invalid character

Issue: experienced when attempting to uninstall the App-V 5.0 SP2 RDS client.
Event Log: Product: Microsoft Application Virtualization (App-V) Client for Remote Desktop Services 5.0 Service Pack 2 x64 -- Error 1324. The folder
path 'C:' contains an invalid character
Symptoms (when in this current state):
Unable to uninstall the SP2 client
You can upgrade the client (via hotfix) and uninstall the hotfix, but you will not be able to remove the SP2 client
AppvVfs filter driver will not create an instance, therefore applications will not be able to read into existing streamed VFS content, or trigger sparse files to stream content. (you can still stream the content via other means, like the UI or powershell)
Because of the AppvVfs filter driver not instantiating, applications that depend on licences that exist in VFS will not be able to be read causing certain applications to react as if the license does not exist or is an incorrect format

Resolution:
Check for the existence of a hidden folder named %appdata% in the C:\Program Files\Microsoft Application Virtualization\Client folder. (You will need to un-check the folder options box in windows explorer for "Hide
protected operating system files" to see it)
If the hidden %appdata% folder exists, delete it.
Proceed to uninstall the App-V client
After a clean uninstall and removal of remnants of the client, reinstall the client again and apply the latest hotfix available (Hotfix 2 for SP2 at a minimum).

Help need setting up remote desktop (on a router)

hey networking pros,
I have major trouble setting up remote login (remote desktop).
Specification : OSX tiger, LINKSYS
now i have managed to use tightVNC and manage remote desktop BUT that was when i was on the same network. Now my laptop lies at home and at school (work) i have windows running and want to access my mac at home. I cant manage to do that. Since i am on a different network and that i have router at home and also i do not use air port express (i use a linksys)
I need a static ip which in need to know the DNS servers (adelphia dosent give that to me since i am not a business customer). I have enabled port forwarding (5900) i have even set up an an account with dysDNS.org (i dunno how that helped).
can some one please give me with step by step instruction.
thanks

You already have most of what you need, but you do need a little more understanding of what you're doing.
Keep in mind that the Microsoft Remote Desktop Connection client is one-way only. You can connect from a Mac to a Window XP Professional computer, but not from Windows XP Pro to Mac OS X. What I describe below is how to connect from a Mac on the Internet to a Windows XP Pro computer at home.
First, Remote Desktop may look like VNC, but it's not the same thing. Therefore, port 5900, which works with VNC, won't work for Remote Desktop. You'll want to port forward 3389 to make this work. When you go to your router and make this port forward entry, you'll enter the IP address of the machine you want to direct all RDC traffic to. This gets the RDC traffic from your router to your computer.
You went to DynDNS.org to help you find your router on the Internet. The IP address, as you've researched, can change. But if you set up your router to report its IP address to DynDNS then you can always connect to your router by name. You don't have to keep track of your IP address changing. DynDNS will do this for you. This gets the RDC traffic from you to your router.
So, the steps are:
1. Set up a DynDNS.org account and you'll give yourself a name such as "myrouter" so that you can use a name like "myrouter.homeip.net" to connect to your home network.
2. On your router, port forward all incoming Internet 3389 traffic to the IP address and port 3389 of your computer.
3. On your Windows XP Pro computer (you can't do this with Windows XP Home) enable the Remote Desktop Connection software (right-click My Computer --> Properties --> Remote tab --> select the second checkbox).
4. From a Mac somewhere on the Internet, open the RDC client and enter the DynDNS name you gave yourself and click the Connect button.
5. Your Mac will contact DynDNS and get your current IP address.
6. Your Mac will then connect to your home router, which will forward all RDC traffic (coming in on port 3389) to your Windows computer in your home.
Hope this helps! bill
1 GHz Powerbook G4 Mac OS X (10.4.4)

Can we implement site catalyst for Remote desktop app like MS dynamics NAV?

Can we implement site catalyst for Remote desktop app like MS dynamics NAV?
please throw some insight

Hi,
Thank you for posting in Windows Server Forum.
Does this happens for this particular application?
For a test you can publish Notepad\WordPad as RemoteApp and check whether facing same issue. Please check the result and let us know. If it’s working normally then might seems there is some configuration issue with MS Dynamics App.
Does this happens for all user or specific users?
Which version of RDP Client you are using for client system?
Try to install RDP 8.1 for better feature.
Update for RemoteApp and Desktop Connections feature is available for Windows
http://support.microsoft.com/kb/2830477
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support

Updates for Remote Desktop via App Store Software Update

Hello, and Happy Thanksgiving. On a computer running Mavericks, I installed Apple Remote Desktop 3.5 from the disk (not from the App Store.) On it's first startup, I was greeted with the message "The Remote Desktop Administrator software must be upgraded on this computer." I downloaded and installed the 3.7 update manually from http://support.apple.com/kb/dl1565. However, I view this as a "Band-Aid", and not a fix. How would I recieve future updates for Remote Desktop from Software Update within the Mac App Store?

Hi ya.. just to let everyone know Apple UK Senior Tech support are aware of this error message that we are all getting as from today and are on the case....

I don't have a wireless keyboard or mouse for my 2007 iMac, is there any way that can use remote desktop and access it from my 2010mbp.

i don't have a wireless keyboard or mouse for my 2007 iMac, is there any way that can use remote desktop and access it from my 2010mbp

Hi champrider,
You can use an application such as Apple Remote Desktop to control your iMac remotely. See this article -
OS X Mavericks: Allow access using Apple Remote Desktop
This help page will provide you with some other useful resources for Apple Remote Desktop -
Remote Desktop Help
Thanks for using Apple Support Communities.
Best,
Brett L

New to server, need VPN for remote desktop and file share...

Similar Messages

Maybe you are looking for