Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a windows 2008 server that is currently running a VPN. There are a few user accounts that are used to connect to the VPN.

Now the problem is, in order to allow them to connect via VPN, I would have to enable remote access. With enabling remote access, they would be able to connect via RDP.

Is there any way to only allow VPN access and not RDP?

share|improve this question
add comment

2 Answers 2

up vote 3 down vote accepted

There is nothing about granting VPN access that allows RDP access to a server. Have you actually tried this with a standard user account? By default, only local administrators should have RDP access to a Windows server if you have it enabled.

share|improve this answer
add comment

Now the problem is, in order to allow them to connect via VPN, I would have to enable remote access. With enabling remote access, they would be able to connect via RDP.

Why? The only users that can RDP into a machine by default are users in the local Administrators group. If these aren't administrators on the server, then they won't be able to connect unless you explicitly add them to the Remote Desktop Users group.

Granting a user the ability to log into a VPN doesn't magically give them any other group membership on the server that they didn't already have.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.