Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a SBS 2003 server with Terminal Services enabled. Currently I am able to RDP to my server by going to I would like to restrict RDP access to my network to be over VPN only. However, I am worried I will accidentally disable RDP to my server completely. How can I configure remote access to only be available when connected to a VPN?

share|improve this question
up vote 5 down vote accepted

Assuming you want to make that happen only from the outside (Internet), then simply do not allow RDP (3389) through the firewall. They would connect via the VPN, get an internal IP address, and then use the internal IP, or internal DNS, name of the server to connect.

share|improve this answer

Just create a firewall rule to only accept RDP connections from whatever IP address range your VPN users get.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.