VPN & remote clients - help me understand!

[Dyson]

A friend asked me to set up a VPN connection, this is what
I did:

I set up the PPTP VPN server in the main office that has a
2003 server, and two XP boxes. VPN server is also DNS,
DHCP, and WINS server. Main office has DSL @ 384/384.
Remote office has a T1 connection and two XP boxes.

I would like those two remote XP boxes to log onto the
domain, and be able to access files and a few applications
from the main office over the VPN connection.

Is it as simple as setting up the VPN connection, and
selecting [x] Log on through dial up connection on the
logon screen?

 

[FE-FR]

On the client side it is very simple : create a connection, type the IP
address or DNS name of you VPN GW... and enter login and password

On the server side, you have to install the RRAS service, configure VPN, and
create policies .

It is not very complicated but make sure you know how to properly configure
everithing ... otherwise it may compromise your security.

Regards

FE

 

[Guest]

It is quite straight forward. Setup the RRAS and VPN connection on the server
first - it sounds like you have already done this OK. Add in your remote
user(s) to the Active Directory so they can login.

On the remote PC's I would add them into the Domain - you can do this from
the remote location - no need to drag the PC's back to the LAN!. Login in to
them with an Admin account and setup the VPN connection - make sure used by
all users is ticked when asked (this is so it is accessable from the Login
Screen). While still logged in test the VPN connection. Now you have a VPN
connection you can go through the normal procedure for adding the PC to the
domain, at the end of which you can reboot. Once rebooted the login screen
will have the domain select drop down and you can select your domain. Tick
the Log on through dial up connection on the logon screen as you say - it
will prompt for the dial up conenction to use (select the VPN) and away you
go. If it doesn't show the VPN then this connection wasn't created for All
Users - try again!

We tend to add the user to the LOCAL Administrators group as well, to save
support calls because of no admin privs. - it depends on how well you trust
them...

The only problems we have had is with the router / firewall - we have used
Netgear DG814 / 834 routers and they are pretty poor routing PPTP traffic,
They work with one person VPN'ing generally, after a bit of setting up, but
are no go with 2 or more people.

We are testing a really cheap Origo ADSL router ( http://adsltech.com/ ) and
that even though it is cheaper, seems to be working, but it is early days
yet. I would be interested in what other people use for ADSL routers /
firewalls while using PPTP VPN on remote sites with multiple PC's

Rob