Unable to RDP to SBS via VPN

[guest]

I am having an issue with RDP over VPN. I am able to VPN in to my work's network - once VPN-ed in, I cannot RDP in to the main Server (SBS 2011 - Domain). Howerver I can RDP into the Terminal Server (2nd Server - Windows 2003 R2). I am using Windows 7 Client. When I tried to RDP - I get this message - "This computer can't connect to the remote computer." When I am in office I am able to RDP. I checked the Ip address after VPN in - I am getting the office network - I can even ping the main server. but I cannot RDP. Any thoughts?

[guest]

For this RDP problem, it can be caused by many factors, such as the settings on SBS2011 or the network related settings. However, since the error is too general, we need to do further test to check which part is causing this problem.



Tests:



1. From internal client, please RDP to the SBS2011 server directly and check the result? Do you get any error? If so, please collect the screenshot.



2. From external client, after setting up the VPN connection, could you accesses the share folder or internal website (companyweb) hosted on the SBS2011? Do you get any error here?



3. Since SBS server provide the RWW features so that external users can connect the server and internal client, we can try to access RWW site and then connect the SBS server via RWW. In this scenario, the user must be a SBS domain admin user or have the admin permission.



4. Please collect a screenshot of the RDP error you descripted so that I can get a clearer picture of this problem.



5. Please try to bypass the VPN connection and the RWW to connect the SBS server directly. On SBS2011 server, TS Gateway is installed by default, we can use the TS Gateway to connect the SBS server directly. To do this, please refer to the following steps:



a. On the external client, run MSTSC to start the RDP connection wizard,

b. click Options, Advanced, Settings, choose Use these RD Gateway server settings

c. Beside Server Name, type in: remote.domain.com

d. Click OK to save settings.

e. Under General, type in the SBS server name to connect the server.

[guest]

Here are the answers to your questions.



1. From internal client, please RDP to the SBS2011 server directly and check the result? Do you get any error? If so, please collect the screenshot.
- Internal client can RDP to the SBS 2011 server directly with no problem.



2. From external client, after setting up the VPN connection, could you accesses the share folder or internal website (companyweb) hosted on the SBS2011? Do you get any error here?
- External client able to establish a VPN connection with no problem – able to access the shared folder of the terminal Server only but not SBS2011 (when I try to access the shared drive from run command – I get “The specified network name is no longer available.) I am able to hit the internal website (companyweb) – no problem.



3. Since SBS server provide the RWW features so that external users can connect the server and internal client, we can try to access RWW site and then connect the SBS server via RWW. In this scenario, the user must be a SBS domain admin user or have the admin permission.
- I logged into the RWA and tried to remotely access SBS server or Terminal Server I get the message – “This computer can’t verify the identity of the RD Gateway “remote.domain.com”. It’s not safe to connect to servers that can’t be identified. Contact your network administrator for assistance.”



4. Please collect a screenshot of the RDP error you descripted so that I can get a clearer picture of this problem.
- When I tried to RDP [SBS 2011] over VPN, I get this – This computer can’t connect to the remote computer. Try connecting again. If the problem continues, contact the owner of the remote computer or your network administrator.


5. Please try to bypass the VPN connection and the RWW to connect the SBS server directly. On SBS2011 server, TS Gateway is installed by default, we can use the TS Gateway to connect the SBS server directly. To do this, please refer to the following steps:
a. On the external client, runMSTSC to start the RDP connection wizard,
b. clickOptions, Advanced, Settings, chooseUse these RD Gateway server settings
c. Beside Server Name, type in:remote.domain.com
d. Click OK to save settings.
e. Under General, type in the SBS server name to connect the server.
What is the result this time?


- I tried the above step and this is what I get – “This computer can’t verify the identity of the RD Gateway “remote.domain.com”. It’s not safe to connect to servers that can’t be identified. Contact your network administrator for assistance.”



The work around that I am currently doing is - VPN into my work network - RDP into Terminal Server first then RDP into SBS 2011. Also, I must point out that I am unable to access the shared drive from [SBS 2011].


I'll wait for your response. Please see screenshots below. Many thanks in advance.

[guest]

First, I would like to explain that VPN +RDP is different as TS Gateway/RWW. They are two different ways to connect the remote SBS2011 server. The error you get when using the TS Gateway or the RWW can occur if client does not trust the self-issued certificate of the SBS 2008. Therefore, when connect to the serve via RWW or TS Gateway, the client cannot verify this certificate and it will this error.

At this time, I suggest you use the methods in the following article to install the self-issued certificate on the external client and then connect the SBS2011 serve via RWW again. This could be a workaround for your so that you can access the remote SBS2011 server.



How to Obtain the Certificate Distribution Package in SBS 2011 Standard through Remote Web Access

http://blogs.technet.com/b/sbs/archive/ ... ccess.aspx

For this strange RDP problem occurs when using the VPN connection, I will continue doing the research in my lab. Once I found anything will cause this problem, I will inform you as soon as I can.