Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am wondering if an user can log onto my domain outside the office, or are you only able to do this locally? (in the office)

Can you be outside the town or even country login onto a company's domain? (windows server 2008)

share|improve this question
up vote 0 down vote accepted

Sure, as long as you can access the company network, which is normally what VPN's are for.

Once VPN is defined in the workstation, the login screen even offers the option to FIRST loginto the VPN, THEN process the user login.

Standard functionality in a LOT of companies.

"or even out of country" is idiotic, btw. - this is internet, and the internet doesn ot care whether you are across the street or in another country, as long as the internet connection is available. THe only sensible discintion is "inside company network" and "outside company network, requiring something like a VPN".

share|improve this answer
"Once VPN is defined in the workstation, the login screen even offers the option to FIRST loginto the VPN, THEN process the user login." I think you will find that this is very dependent on the VPN software being used. – MDMarra Jun 5 '10 at 12:57
Actually no - because if you use a really crappy VPN software, you do not define a VPN (on the os level) ;) That said, there is no real need for that - company idiocies left out. WIndows out of the box is pretty good with it's VPN capabilities. – TomTom Jun 5 '10 at 14:39
that is entirely dependent on your VPN termination point. If you are using a policy-based VPN from Juniper or Cisco, many times you cannot use the built-in Windows VPN client. Just because that may be the only client that you are familiar with doesn't mean that it is the only client that exists. – MDMarra Jun 5 '10 at 15:57

Your users will be able to logon to their computers using "cached credentials" (default is to store the last ten logons), then you can connect using any VPN to your work network, and access the "domain" as it were. The only real restriction is roaming profiles, which get borked if you logon without being connected.

If you are talking about logging on using an domain account that hasn't previously logged onto a computer remotely, then see TomTom's answer (and comments), unless the users have "local accounts" on the machines, and then use domain accounts to access the network, that also works.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.