Configuring RDP for a small workplace

in Off-Topic
Next week or so I"m going to someone's workplace to set it up for them so that they can access their work computers via RDP through the Internet. They have a static IP already so I mainly just have to configure port forwarding on their router (a inexpensive consumer model) and set static IP addresses on their computers.
Normally they would have the IT business that they pay to maintain the network do it, but they are $60/hour and some people don't trust them. (Don't know if they would get irritated if they find out that I performed configuration changes on the network, but I doubt they will even find out unless they view the DHCP server lease list on the DC and see a lack of IP leases)
Is there anything that I should be careful (particularly security-wise) when configuring port-forwarding on their router?
Any tips and/or general recommendations are also welcome.
Normally they would have the IT business that they pay to maintain the network do it, but they are $60/hour and some people don't trust them. (Don't know if they would get irritated if they find out that I performed configuration changes on the network, but I doubt they will even find out unless they view the DHCP server lease list on the DC and see a lack of IP leases)
Is there anything that I should be careful (particularly security-wise) when configuring port-forwarding on their router?
Any tips and/or general recommendations are also welcome.
Comments
-
dynamik Banned Posts: 12,312 ■■■■■■■■■□
It'd be better to setup a VPN and only allow RDP from the internal network. -
exampasser Member Posts: 718 ■■■□□□□□□□
I've never thought about a VPN, but I've never set one up. If you have any links to a good guide for setting up a VPN with Server 2003 I'd appreciate it. -
RobertKaucher Member Posts: 4,299 ■■■■■■■■■■
Configure a Windows Server 2003 VPN on the server side
Check that one out.
Stuff on the 270/290 and 291 exams would have infor on how to configure the VPN access on the client/server side.
What are the network ranges used by the company network? -
exampasser Member Posts: 718 ■■■□□□□□□□
Thanks, I'll check it out. The network is just a single subnet class C private IPs.