Using Remote Web Workplace in .NET framework

Generation Data Matrix in .NET framework Using Remote Web Workplace

Connecting to Remote Web Workplace doesn t require any special settings except that you need to be running Internet Explorer 6 (or Internet Explorer 7 from a Windows Vista computer) for full functionality. The default location for RWW is https://remote.domainname.com, where domainname.com is replaced by your public Internet domain name. When you connect to RWW, you see a logon page like that shown in Figure 14-15.

f your network contains sensitive information and whose doesn t these days you should consider providing an additional layer of security beyond simple pass-

words. Windows Small Business Server 2008 sets reasonable password policies, but even the best of password policies is a balancing act between making the password dif cult to crack and making it easy for users to remember and use so that they aren t tempted to write it down on the back of their keyboards. The four kinds of authentication methods or factors are: Something you know (password) Something you have (token, or physical key)

Something you are (biometric) Somewhere you are (location) Of these, only the rst three are realistic and usable in a small business environment, though the fourth location is starting to be used by banks as one factor to be sure that the person trying to access your bank account is actually you. Passwords alone are a single-factor authentication method, in this case something you know. Two-factor authentication requires two of the main three factors and provides a de nite improvement in the surety that the person authenticating to your network is really who he claims to be. For a second authentication factor, we like the simplicity, moderate cost, and effectiveness of a one-time password (OTP). Generated automatically by a token you carry around with you, the combination of the token, a personal identi cation number (PIN), and your SBS password provides an additional level of security. Requiring at least users with administrative privilege (and we think all remote users) to use two-factor authentication is a good way to improve the overall security of the sensitive data on your network. Third-party providers of OTP tokens include AuthAnvil (http://www.authanvil.com), CryptoCard (http://www.cryptocard.com), and RSA SecureID (http://www.rsa.com). Of these, only AuthAnvil is focused on the small business market, with a suite of products that are fully integrated into SBS, including RWWGuard, which replaces the logon page shown in Figure 14-15 with a new page that includes an additional eld to directly enter your OTP. We use RWWGuard and AuthAnvil on our SBS network.

After you ve logged on RWW, you ll see the main RWW page shown in Figure 14-16. From here, you can connect to a computer on your SBS network, log on to Outlook Web Access, go to your internal home page, change your password, or if you re logged on as an administrator, connect to a server to perform system maintenance. You can customize this RWW landing page, even adding links to applications on your network using TS RemoteApps. We ll cover customization of this site in 19, Managing Connectivity, and TS RemoteApps is covered in 25, Adding a Terminal Server.

You can manage the clients that are available on your network, along with many of the settings that control their availability and behavior, from the Windows SBS Console. To see a list of computers joined to your SBS domain, open the Windows SBS Console and click the Network button to open the Computers page, as shown in Figure 14-17. From the Computers page, you can see a quick status for the computers on your network: which ones are online, which ones need updates, and which ones have other problems or warnings. When you click a computer in the list, a new section of the Tasks pane opens showing you tasks you can perform that are speci c to the computer selected, as shown in Figure 14-18, where we ve selected computer HP350-VISTA-03. From here we can offer remote assistance, connect directly to the computer using Remote Desktop (if the computer supports Remote Desktop), view the properties of the computer, check on update and other security-related status, and even remove the computer from the domain.