SBS 2000 - 2003 R2 - Branch Office

We have SBS 2000 at main office.

We will have a branch office with no server, just PC's.

Branch office PC's need to run an application on a server at the main office
using RDP.

1. Should we get a seperate 2003 R2 server at the main office and install
the application there that the branch PC's will access thru RDP ?

2. Should we completely replace the SBS 2000 server with an SBS 2003 R2
server at the main office and install the application there that the branch
PC's will access thru RDP ?

3. Do we set up PPTP VPN from branch PC's to server at main office run the
RDP connection thru that VPN ?

Any other options ?

Branch office will have their own Internet access thru mediacom.

Thanks,

Ray

John
Thu Aug 09 18:29:26 CDT 2007

Inline

--
John Oliver, Jr
MCSE, MCT, CCNA
Exchange MVP 2007
Microsoft Certified Partner

"Ray Brown" <RayBrown@discussions.microsoft.com> wrote in message
news:ADE52D91-3140-428B-9DB6-BEE00C4D4750@microsoft.com...
> We have SBS 2000 at main office.
>
> We will have a branch office with no server, just PC's.
>
> Branch office PC's need to run an application on a server at the main
> office
> using RDP.
>
> 1. Should we get a seperate 2003 R2 server at the main office and install
> the application there that the branch PC's will access thru RDP ?

Yes, install a Windows 2003 Terminal server and purchase the necessary
amount of TS CALs.

>
> 2. Should we completely replace the SBS 2000 server with an SBS 2003 R2
> server at the main office and install the application there that the
> branch
> PC's will access thru RDP ?

Its not necessary but SBS 2003 R2 has some great new features, namely
Exchange 2003. This allows for RPC over HTTPs for Outlook users, no need
for VPN. Users can then run Outlook 2003 in Cached Mode.

>
> 3. Do we set up PPTP VPN from branch PC's to server at main office run the
> RDP connection thru that VPN ?

You can secure your RDP connection through VPN but I would just require
strong password policy and run 3389 through internet. You can encrypt the
initial login through TS policy. VPN can slow things down as everything
must be encrypted and decrypted on both ends but either way will work.

>
> Any other options ?

You need to consider Printing through Terminal Services session. Since
users will be printing to local printers from the Terminal Session you will
need to be sure that the Branch Office local printer drivers are installed
the TS Server.

>
> Branch office will have their own Internet access thru mediacom.
>
> Thanks,
>
> Ray
>
>

Steve
Thu Aug 09 19:11:58 CDT 2007

Expanding on John's comments. If you upgrade to SBS 2003 then another
beloved feature is Remote Web Workplace (RWW). This would then become the
means by which you connect the remote users to the separate terminal server.

"John Oliver, Jr. [MVP]" <jcoliverjr@hotmail.com> wrote in message
news:utRLY1t2HHA.5740@TK2MSFTNGP04.phx.gbl...
> Inline
>
> --
> John Oliver, Jr
> MCSE, MCT, CCNA
> Exchange MVP 2007
> Microsoft Certified Partner
>
> "Ray Brown" <RayBrown@discussions.microsoft.com> wrote in message
> news:ADE52D91-3140-428B-9DB6-BEE00C4D4750@microsoft.com...
>> We have SBS 2000 at main office.
>>
>> We will have a branch office with no server, just PC's.
>>
>> Branch office PC's need to run an application on a server at the main
>> office
>> using RDP.
>>
>> 1. Should we get a seperate 2003 R2 server at the main office and install
>> the application there that the branch PC's will access thru RDP ?
>
> Yes, install a Windows 2003 Terminal server and purchase the necessary
> amount of TS CALs.
>
>>
>> 2. Should we completely replace the SBS 2000 server with an SBS 2003 R2
>> server at the main office and install the application there that the
>> branch
>> PC's will access thru RDP ?
>
> Its not necessary but SBS 2003 R2 has some great new features, namely
> Exchange 2003. This allows for RPC over HTTPs for Outlook users, no need
> for VPN. Users can then run Outlook 2003 in Cached Mode.
>
>>
>> 3. Do we set up PPTP VPN from branch PC's to server at main office run
>> the
>> RDP connection thru that VPN ?
>
> You can secure your RDP connection through VPN but I would just require
> strong password policy and run 3389 through internet. You can encrypt the
> initial login through TS policy. VPN can slow things down as everything
> must be encrypted and decrypted on both ends but either way will work.
>
>>
>> Any other options ?
>
> You need to consider Printing through Terminal Services session. Since
> users will be printing to local printers from the Terminal Session you
> will need to be sure that the Branch Office local printer drivers are
> installed the TS Server.
>
>>
>> Branch office will have their own Internet access thru mediacom.
>>
>> Thanks,
>>
>> Ray
>>
>>
>

RayBrown
Fri Aug 10 13:36:00 CDT 2007

Just as a follow-up question, if we currently control internet access at the
main branch (what sites they can and cannot go to) thru ISA how can we
control Internet access at the branch office since they will have a seperate
Internet connection ? Do we only allow internet access by putting a proxy
address that points back to the SBS 2000 server back at the main office on
the branch pc's and force them to establish the VPN connection before they
can access the Internet ?

"Ray Brown" wrote:

> We have SBS 2000 at main office.
>
> We will have a branch office with no server, just PC's.
>
> Branch office PC's need to run an application on a server at the main office
> using RDP.
>
> 1. Should we get a seperate 2003 R2 server at the main office and install
> the application there that the branch PC's will access thru RDP ?
>
> 2. Should we completely replace the SBS 2000 server with an SBS 2003 R2
> server at the main office and install the application there that the branch
> PC's will access thru RDP ?
>
> 3. Do we set up PPTP VPN from branch PC's to server at main office run the
> RDP connection thru that VPN ?
>
> Any other options ?
>
> Branch office will have their own Internet access thru mediacom.
>
> Thanks,
>
> Ray
>
>

John
Sat Aug 11 09:39:49 CDT 2007

Yes, but be aware that their internet connection will not be the fastest
since it actually goes through the VPN, then ISA then your internet
connection at Main Office. Also, if your link goes down at anytime they
will not be able to browse the internet even though their internet
connection is up.

--
John Oliver, Jr
MCSE, MCT, CCNA
Exchange MVP 2007
Microsoft Certified Partner


"Ray Brown" <RayBrown@discussions.microsoft.com> wrote in message
news:A012715C-610C-4B3F-BB53-F22AE4B24356@microsoft.com...
> Just as a follow-up question, if we currently control internet access at
> the
> main branch (what sites they can and cannot go to) thru ISA how can we
> control Internet access at the branch office since they will have a
> seperate
> Internet connection ? Do we only allow internet access by putting a proxy
> address that points back to the SBS 2000 server back at the main office on
> the branch pc's and force them to establish the VPN connection before they
> can access the Internet ?
>
> "Ray Brown" wrote:
>
>> We have SBS 2000 at main office.
>>
>> We will have a branch office with no server, just PC's.
>>
>> Branch office PC's need to run an application on a server at the main
>> office
>> using RDP.
>>
>> 1. Should we get a seperate 2003 R2 server at the main office and install
>> the application there that the branch PC's will access thru RDP ?
>>
>> 2. Should we completely replace the SBS 2000 server with an SBS 2003 R2
>> server at the main office and install the application there that the
>> branch
>> PC's will access thru RDP ?
>>
>> 3. Do we set up PPTP VPN from branch PC's to server at main office run
>> the
>> RDP connection thru that VPN ?
>>
>> Any other options ?
>>
>> Branch office will have their own Internet access thru mediacom.
>>
>> Thanks,
>>
>> Ray
>>
>>

RayBrown
Mon Aug 13 11:40:01 CDT 2007

Are there any other ways to control internet access at that branch office ?
Would it take some sort of 3rd party application being installed on each of
the PC's to be able to control this ? Thanks for the helpful information
you've already provided.

"John Oliver, Jr. [MVP]" wrote:

> Yes, but be aware that their internet connection will not be the fastest
> since it actually goes through the VPN, then ISA then your internet
> connection at Main Office. Also, if your link goes down at anytime they
> will not be able to browse the internet even though their internet
> connection is up.
>
> --
> John Oliver, Jr
> MCSE, MCT, CCNA
> Exchange MVP 2007
> Microsoft Certified Partner
>
>
> "Ray Brown" <RayBrown@discussions.microsoft.com> wrote in message
> news:A012715C-610C-4B3F-BB53-F22AE4B24356@microsoft.com...
> > Just as a follow-up question, if we currently control internet access at
> > the
> > main branch (what sites they can and cannot go to) thru ISA how can we
> > control Internet access at the branch office since they will have a
> > seperate
> > Internet connection ? Do we only allow internet access by putting a proxy
> > address that points back to the SBS 2000 server back at the main office on
> > the branch pc's and force them to establish the VPN connection before they
> > can access the Internet ?
> >
> > "Ray Brown" wrote:
> >
> >> We have SBS 2000 at main office.
> >>
> >> We will have a branch office with no server, just PC's.
> >>
> >> Branch office PC's need to run an application on a server at the main
> >> office
> >> using RDP.
> >>
> >> 1. Should we get a seperate 2003 R2 server at the main office and install
> >> the application there that the branch PC's will access thru RDP ?
> >>
> >> 2. Should we completely replace the SBS 2000 server with an SBS 2003 R2
> >> server at the main office and install the application there that the
> >> branch
> >> PC's will access thru RDP ?
> >>
> >> 3. Do we set up PPTP VPN from branch PC's to server at main office run
> >> the
> >> RDP connection thru that VPN ?
> >>
> >> Any other options ?
> >>
> >> Branch office will have their own Internet access thru mediacom.
> >>
> >> Thanks,
> >>
> >> Ray
> >>
> >>
>
>

John
Mon Aug 13 18:42:34 CDT 2007

Ray,

Well, if it were me I really like www.browsecontrol.com for third party app
that can control internet access. For the price, its a great deal and great
product. I have many small and larger clients running it with great
success. There is 30 day free trial if you would like to try it. I also
like www.spectorsoft.com for just monitoring software. You can also look at
ISA Server for Internet access control but as I mentioned all internet
requests would go through the VPN.

--
John Oliver, Jr
MCSE, MCT, CCNA
Exchange MVP 2007
Microsoft Certified Partner


"Ray Brown" <RayBrown@discussions.microsoft.com> wrote in message
news:1205B728-D0CC-4CF9-8F95-6D971483FB7E@microsoft.com...
> Are there any other ways to control internet access at that branch office
> ?
> Would it take some sort of 3rd party application being installed on each
> of
> the PC's to be able to control this ? Thanks for the helpful information
> you've already provided.
>
> "John Oliver, Jr. [MVP]" wrote:
>
>> Yes, but be aware that their internet connection will not be the fastest
>> since it actually goes through the VPN, then ISA then your internet
>> connection at Main Office. Also, if your link goes down at anytime they
>> will not be able to browse the internet even though their internet
>> connection is up.
>>
>> --
>> John Oliver, Jr
>> MCSE, MCT, CCNA
>> Exchange MVP 2007
>> Microsoft Certified Partner
>>
>>
>> "Ray Brown" <RayBrown@discussions.microsoft.com> wrote in message
>> news:A012715C-610C-4B3F-BB53-F22AE4B24356@microsoft.com...
>> > Just as a follow-up question, if we currently control internet access
>> > at
>> > the
>> > main branch (what sites they can and cannot go to) thru ISA how can we
>> > control Internet access at the branch office since they will have a
>> > seperate
>> > Internet connection ? Do we only allow internet access by putting a
>> > proxy
>> > address that points back to the SBS 2000 server back at the main office
>> > on
>> > the branch pc's and force them to establish the VPN connection before
>> > they
>> > can access the Internet ?
>> >
>> > "Ray Brown" wrote:
>> >
>> >> We have SBS 2000 at main office.
>> >>
>> >> We will have a branch office with no server, just PC's.
>> >>
>> >> Branch office PC's need to run an application on a server at the main
>> >> office
>> >> using RDP.
>> >>
>> >> 1. Should we get a seperate 2003 R2 server at the main office and
>> >> install
>> >> the application there that the branch PC's will access thru RDP ?
>> >>
>> >> 2. Should we completely replace the SBS 2000 server with an SBS 2003
>> >> R2
>> >> server at the main office and install the application there that the
>> >> branch
>> >> PC's will access thru RDP ?
>> >>
>> >> 3. Do we set up PPTP VPN from branch PC's to server at main office run
>> >> the
>> >> RDP connection thru that VPN ?
>> >>
>> >> Any other options ?
>> >>
>> >> Branch office will have their own Internet access thru mediacom.
>> >>
>> >> Thanks,
>> >>
>> >> Ray
>> >>
>> >>
>>
>>