Remote Access With Small Office

[MagnumVP]

I have a Remote office with 2 Computers running Windows XP Pro and Office 2003 with a DSL connection.

I can't see a reason to install a server at that remote office so I need the computers to authenticate to the DC at the HQ across the Internet. I would also see if it is possible to give them secure access to our file server.

I'll be using RFC or HTTP to connect to the Exchange 2003 Server for email but, how can I securely implement an authenication process?

I was thinking of implementing a VPN router solution using a basic $100.00 router, but since it is Windows XP, couldn't I just use the XP Pro built in VPN connection as a solution? Then again, how could they use the XP VPN to connect to the DC across the Internet if they can't authenicate first?

What are your thoughts?

 

[ChicagoTechNet]

quoted from

http://www.chicagotech.net/

How to authenticate a remote client to the DC
1. Setup site to site VPN.
2. Use log on using Dial-Up connection


Robert Lin, MS-MVP, MCSE & CNE
Windows, Network, Internet, VPN, Routing and How to at

http://www.ms-mvps.com

 

[gacollier]

Magnum,

To expand on Chicago's post...

One would be a site to site VPN connection using IPSec. Basically you would have a VPN appliance both at the remote site and the main site with an always on VPN LAN to LAN tunnel. As the computers fire up at the remote site, they would utilize the LAN to LAN VPN to authenticate against the DC. Pretty basic setup. It does require a VPN appliance (router) with IPSec capabilities. You can pick up a fairly inexpensive unit from Linksys (BEFVP41) or D-Link (DI-808HV), or a more expensive option from Cisco (Pix 501).

Here's a thread discussing routers:

http://www.tek-tips.com/viewthread.cfm?SQID=802448&SPID=463&page=1

Secondly, you could just outfit the remote and main office with a broadband connection and utilize Windows VPN server (mulithomed, forwarded, or DMZ'ed) at the main office and standard Windows VPN Dial-up support. Basically the remote user would log onto there units then once in Windows fire up a VPN client connection and authenticate against the DC via the main office VPN server, then they would be inside the domain LAN.

Good luck.

 

[MagnumVP]

Now that is what I'm talking about.

Thank you gacollier for the information.