Managing Connectivity in Visual Studio .NET

Paint ECC200 in Visual Studio .NET Managing Connectivity

We use TFA for remote access to our SBS network. We ve implemented Scorpion Software s RWWGuard and AuthAnvil (http://www.scorpionsoft.com) to require a one-time password in addition to the normal RWW logon, as shown in Figure 19-27.

What we really like about RWWGuard is that it s almost completely transparent. It looks and feels just like SBS, except for the one additional eld for our one-time password. And the AuthAnvil key fob with those one-time passwords is on our keychain.

There are two separate lists of links that are visible below the main buttons of the RWW home page: Organization Links and Administration Links. By default, all users are able to see the Organization links, but only users with the Network Administrator role, or the Standard User With Administration Links role, are able to see the Administration links. You can customize these links, adding or removing them as appropriate for your network, and you can also con gure which users have the links visible. To change which links are visible in RWW, follow these steps:

Remote Web Workplace (RWW)

1. 2. 3. 4.

Open the Windows SBS Console if it isn t already open. Click Shared Folders And Web Sites in the navigation bar and then click the Web Sites tab. Click the Remote Web Workplace link in the left pane and then click View Site Properties in the Tasks pane to open the Properties dialog box for RWW. Click Home Page Links in the left pane of the Properties dialog box to open the Home Page Links For Remote Web Workplace dialog box shown in Figure 19-28.

5. 6. 7. 8.

Clear the check boxes for any links you don t want to have visible on RWW. This will affect all users. Click Manage Links to open the Remote Web Workplace Link List Properties dialog box, shown in Figure 19-29. To disable either Organization Links or Administration Links, clear them on the General Settings page of the Remote Web Workplace Link List Properties dialog box. Click Permissions in the left pane to open the Manage Gadget Permissions page, shown in Figure 19-30.

Remote Web Workplace (RWW)

9. 10.

Click Modify beneath the list you want to change permissions for to open the Change Group Membership dialog box for the security group. Click Organization Links to open the Manage Organization Links page shown in Figure 19-31. Links added here will be visible to all SBS users who have permission to log on to RWW. (See 25, Adding a Terminal Server, for details on adding links here for TS RemoteApps.)

Click Administration Links to open the Manage Administration Links page. Links added here are only visible to users with either Network Administration or Standard User With Administration Links roles. Click Customization in the left pane to open the Customize Link List Section Names page, shown in Figure 19-32. The only change you can make here is to change the names of the two sets of links.

When you ve completed your changes to the RWW Web site properties, click OK to exit and apply the changes.

Virtual Private Networks (VPNs)

Most operations that users and administrators need to do from remote locations can, and should, be performed using Remote Web Workplace. RWW gives your users a secure portal to connect to the resources of the SBS network and is the preferred way to access the network from a remote location. If you do have a compelling need to implement VPN onto your SBS network, we strongly suggest that you carefully limit the users that have VPN privileges and that you ensure that their computers are fully patched and protected at all times. VPNs signi cantly increase your security risk from an unpatched and compromised computer causing problems on your SBS network. Because VPNs allow a remote computer to directly connect to the network, any malware on the remote computer has full access to your SBS network.

Virtual Private Networks (VPNs)