I am fairly new to administrating servers, but I have been charged with the task of working out remote access to the company's network.
The general plan is to connect through a VPN to a terminal server connected to the network.
The users will then connect to the network in an RDP session which we will configure to prevent files from being taken off the network and moved onto remote machines.
There are 2 things I need to figure out for this to work though:
The remote users need to be able to log into the terminal server using their domain logons (set-up with roaming profiles) but they cannot have access to the documents they normally use while logging in locally. They should be able to save a different set of documents on their terminal server logon.
There are shared folders which are also located on the domain controller server. When a user logons remotely they cannot have access to these files.
Basically, we want to limit the users to a few business applications installed on the terminal server we also want them to be able to create and save documents in the RDP session (like MS Word and Excel) while they are out on the road. And we do not want them accessing their local work files from the road.
The terminal server is running MS Server 2008.
The domain controller (which is also the file server) is running Server 2000.
There is a Cisco 3550 switch which will sit between the Terminal Server and the Domain Controller/File Server. So one thought was to use the switch to prevent access to the shared files, that would solve #2 above. But I do not think I can use the same technique to prevent access to user profile documents.
Is there some kind of a group policy setting that can be done to set this up?
I don't have anything set-up on the terminal server end yet so I cannot test much. I needed to give some kind of sensible proposal for the two points above to roll forward and complete the set-up.