Domain user remotely access his desktop via RDP

[zillah]

Hi

How can I let a domain user “John Allen” from his home to access his desktop (WS-A) at work via RDP.

First he would access his work network ( environment Active Directory 2003
) via VPN and then how can I let him to access his desktop at work via RDP ??

Could someone post step by step how should I configure that ? Is it through server local policy (gpedit.msc) or domain policy (gpmc.msc ) or something else ?

I tried to google for it by using this key :

“ add user to remote desktop groups Active Directory “ but I could not get what I am looking for :

http://www.google.com.au/search?hl=e...&meta=&aq=f&oq=


http://www.computing.net/answers/win...tion/5604.html

Thanks

[jdc2000]

Have you tried to access a client computer from the Server 2003 computer using Remote Desktop? Once you get that working, you should be ready to try it with the VPN setup.

Link:

http://support.microsoft.com/kb/814590

[zillah]

Hi jdc2000

Have you tried to access a client computer from the Server 2003 computer using Remote Desktop?

Do u mean have I tried to access the client computer (WS-A) from within our LAN ? because I did not get what did u mean by : " from the Server 2003 computer using Remote Desktop "

Thanks

[jdc2000]

Yes, I meant have you logged in to the Server 2003 computer directly and then tried to use Remote Desktop to log in to a client computer on your internal network. This eliminates any firewall issues that might come into play when accessing your network from the Internet. Once you have Remote Desktop working on your internal network, then you can work on the firewall and VPN configuration needed for that access.

[zillah]

Yes, I meant have you logged in to the Server 2003 computer directly and then tried to use Remote Desktop to log in to a client computer on your internal network. This eliminates any firewall issues that might come into play when accessing your network from the Internet. Once you have Remote Desktop working on your internal network

I did try that and it was working fine without any problem.


I did another test ,I accessed the work network via VPN as a username (called support) who is member of a domain admin group.

Then I logged in via RPD to the workstation WS-A ip address :192.168.0.10 (real name of the PC is P3 for the forum purpose I just named it WS-Am, please see the snapshot below )

Now if there is any restriction through a firewall I should not be able to access the workstation WS-A from the first place for any user,,,,,should I ??

Now my concern when I logged in to the WS-A via VPN ( Although I am going to try that when I am physically in front of the PC ) as a user with domain admin privilege ( not local admin ),,,,,,I can not find domain users to add them to " Remote Desktop Users "

Means when I do right click to 'My Computer ' > ' Remote ' tab > ' Select Remote Users...' tab > ' Add ' tab > ' Advanced ' tab > ' Find now ' tab > I can not find domain user,,,,,I can find only local users.

I believe to add a domain user to " Remote Desktop Users " it should not be matter if I logged in to WS-A (RDP) within the LAN or through VPN

Please see the link below :

http://img13.imageshack.us/img13/375...nloggedinf.jpg

Thanks