Small Office network..need a domain and VPN.

[ejoech]

A client that I do various tech support for gave me a call yesterday stating that she wanted to add 2 PCs to her existing network of 4 PCs(6 total.), and set it up so if she has a certain employee they have to login and can only access their documents and programs..and she also wanted to be able to access her computer from home.

Now, to be honest, I've never worked with Windows Server 2003..and I know most people are going to say don't try it unless you know what you're doing, but I learn most of the things I do as I go along, and it's all turned out fine. I'm also very close with these people so I don't think they will mind.

I also have some resources for learning windows server 2003 so I'm not too concerned. Basically I just need to set up a domain, pretty straight forward, right? Also, as far the VPN..I'm really not sure how this works. I have some knowledge of setting up the domain, but none of the VPN. How would one connect from home? I will put XP Pro on all workstations since it has built in VPN support.

What kind of server will be needed? Some of the computers will need use of memory intensive graphics programs. Would it be best to run these locally? There should be around 6 PCs, I'm not sure what kind of server is needed for this.

Any help/guidance/etc is appreciated. thank you very much!

 

[jtusa]

2K3 Server is easy to figure out. If you've messed with 2K Server at all, 2K3 will be very familiar to you. Active Directory will do exactly what you need as far setting access rights for users.

As far as the server is concerned, you don't need anything high end at all. You're basically talking just storage, domain controller/AD(all the graphics processing would be done on the local machines, not the server). I'd look at one of the Dell 400SC servers they are always selling on the cheap. Just add some memory and however much storage you need and you're good to go.

 

[deadly99]

Ya 2003 is the way to go, use a .local domain then theres no charge and hassles for a newbie. If they want to spend some cash I would recommend a checkpoint firewall * safe@office series ) for under 600$. It offers vpn services. Hope it helps.

 

[ejoech]

Yeah, I'm not too worried about 2k3 server. More worried about the VPN...don't really have any experience with this...and haven't been able to find any guides..does anyone have a guide for setting up a VPN with XP pro?

Also, I'd like to install an automatic back up system..how easy is this done?

 

[kevnich2]

In XP Pro, go into control panel and into network connections, at the left click on create a new connection, then setup advanced at the bottom, then next. Click accept incoming connections, then next, then next again, select allow virtual private network connections, then next. In here select the users you want to allow to connect, then press next. If you want special IP settings, highlight internet protocol and choose properties. In properties you can either specify what Ip's are given to clients or if the network has another router, it'll get the IP's from it by leaving it default at DHCP. Choose ok, then next. Then finish and your all done. This will setup a PPTP VPN connection.

 

[addragyn]

"A client that I do various tech support for gave me a call yesterday stating that she wanted to add 2 PCs to her existing network of 4 PCs(6 total.), and set it up so if she has a certain employee they have to login and can only access their documents and programs..and she also wanted to be able to access her computer from home. "

So put them on NT, 2000 or XP and start using accounts.

Doing a server and VPN are two seperate items. So take it one at a time.

Fo what you've asked for a server really isn't even necessary. You could just turn on Netbeui and have a shared folder on all machines. If they do need a server there is absolutely no reason to spend your client's money on 2k3 server in this situation.


"Now, to be honest, I've never worked with Windows Server 2003..and I know most people are going to say don't try it unless you know what you're doing, but I learn most of the things I do as I go along, and it's all turned out fine. I'm also very close with these people so I don't think they will mind."

If they do need a server there is absolutely no reason to spend your client's money on 2k3 server in this situation.

You're making a very dangerous assumption since it's not your business that will have the problem here.


"I also have some resources for learning windows server 2003 so I'm not too concerned. Basically I just need to set up a domain, pretty straight forward, right? Also, as far the VPN..I'm really not sure how this works. I have some knowledge of setting up the domain, but none of the VPN. How would one connect from home? I will put XP Pro on all workstations since it has built in VPN support."

For 6 machines a workgroup would be fine for sharing files and printers. Especially for your experience level.

First see if you client wants remote control or VPN. If it's still VPN I reccomend you get a router that will take care of this for you. There is no good reason to have a workstation facing the internet doing VPN duty. You do not need XP to do VPN. FYI the XP VPN client does not have the best rep.


"What kind of server will be needed? Some of the computers will need use of memory intensive graphics programs. Would it be best to run these locally? There should be around 6 PCs, I'm not sure what kind of server is needed for this. "

Use the oldest machine there. Your business owner will appreciate saving the dough and the user will like getting a new machine.

Run all intensive programs locally.

I would reccomend using SME Server with a RAID 1 config. Put those two drives in coolers for extra piece of mind. Also see tech-geeks.org for more SME info.

Do not forget abot setting up backup when you put the new server in.

Set out requirements for your project and how you'll show the business owner you've complete them. For example, looging in with one user saving a file on the server in the home directory and in a common directory. Log in as another and show that you only have access where you should.

Explain to the owner why you made the decisions you did. Explain technical stuff quickly and simply. Focus on things they care about; saving money, less hassle later on etc.

You do sell it well, deliver, and make them happy and you'll get other clients from their reccomendations. A one man smallbiz consulting opertation can earn 6 figures.

 

[ejoech]

addragyn: great post, appreciate it very much!

In response: Please pardon my ignorance, but I'm learning. If a server isn't necessary, what would make a server necessary? Can Netbeui allow policies to be pushed? She wants it so for example, the "sales people" ONLY have access to sales software and nothing else. And of course their respected documents.

I understand how to set the VPN up in XP, I thought it would be easy enough, but again sorry if this is a stupid question, but how would they access it from home?

And the difference between remote control and VPN?

Thank you very much and I apologize for the stupid questions.

Appreciated!

 

[skyking]

As he stated above, there are secure routers that will take care of VPN.
The difference is this: Using VPN, you log into a domain or workgroup as if you were in the building. You can see the shares that you have permissions to access, just like you were at your desk and had opened my network places.
If you have shares on the server he mentions above, you will see those.
Remote control is quite different. You have to forward the port through the router to the machine you wish to control.
Once you are there, it is like using your computer, but there is a noticable lag. Using VPN, the only lag time occurs when you are trying to grab a file at the office. The rest of the time, it is your machine at home.

 

[Chunkee]

if you really want the most bang for the buck and easy maintenance and setup, use Small Business Server 2003 for them. That is what I do for my clients. IT is awesome. You get, server 2003, exchange 2003, sharepoint services, nice fax management, awesome stable product.

Just a suggestion.

jC

 

[addragyn]

In response: Please pardon my ignorance, but I'm learning. If a server isn't necessary, what would make a server necessary? Can Netbeui allow policies to be pushed? She wants it so for example, the "sales people" ONLY have access to sales software and nothing else. And of course their respected documents.

You decide whether the server is necessary. Genererally it's a good idea for a business to have a server. but know your options, explaining them to the client and helping them pick one makes an informed client, makes a happy client, makes a thriving consultancy.

No you could not push policies w/ Netbeui. But why are you worrying about policices for a 7 machine LAN? Start from the beginning.

Ok. So give them accounts with the sales software on their machine and nothing else. If you're keeping the actual sales data on the server makes a "sales" group and only give those users rights to it.

And the difference between remote control and VPN?

VPN gives you outside access to your LAN.

Remote control uses your machine remotely. Remote control examples are RDP and gotomypc.com and VNC.

Thank you very much and I apologize for the stupid questions.

Appreciated!

For sure & no stupid questions.

Now go download the SME iso! For you I recommend settig it up as a server only and running DHCP and VPN from your router. This guide should get you moving. Then ask for help here in the Os forum and on the contribs.org forum. You're gonna be rollin' in no time. I'll be looking for the updates.

 

[ejoech]

Thanks for the helpful replies.

I think I'd rather go with VPN.

They won't be needing Exchange 2003 as only one person even uses an e-mail address. So then I should just go for Windows Server 2003 standard right, not the small business?

addragyn: I can't thank you enough for your help. I also understand that you're trying to go the cheapest way possible and still get the same results, which is great. To be honest, since I have such little experience, I think it may be easier for me to just use WS 2k3. I will definitely look into SME though. Thank you.

Now, I priced out a server from dell along with WS 2k3 and 10 cal licenses...around $2500.

For my needs I doubt a server like that is necessary, although the warranty does help a lot.

addragyn - I want to go your way, for my own sake(learn more, makes me look good by not being as expensive), and for their sake(save money), but I really think I may go the more expensive, easier route. They have no problem spending money, I think even if I go the more expensive route they'll be surprised how cheap it is.

Also, I know this is a very hard question to answer, but I was wondering if anyone had any idea how long this would all take to set up. Keep in mind I have very little to no actual experience doing this. She wants to know roughly how much it would cost with labor and materials.

Thank you very much, Look forward to the responses!

Sage

 

[addragyn]

I don't know why you keep on insisting 2k3 Server will be easier. It's not.

You can try SME for free. It installs automatically, you just need to configure it same as any other server. Which you can do through a browser. See these screenshots.

http://contribs.org/modules/xo...p?set_albumName=sme601


Setup is really variable. If you're looking at this as a learning experience then give them a set price and just get it done no matter how long.

Cheaper is not my goal here. I've had E-Smith systems, 4.0 they're now @ 6, running in a corner for years. (SME used to be called E-Smith.) The biggest cost in an IT project is almost always the labor, are you gonna charge them $2,500 to setup a simple server. My eye is towards the best solution for the client and the consultant. For small business servers that's almost always Linux. Don't marginalize the value of your work!

 

[ejoech]

Update:

I spoke to my client about her options, explained both of them, pluses and minuses of each.

She decided to go with server 2k3..the $1400 seemed like pocket change to her.

She just left for Florida but I'm going to order it when she gets back and get it set up.

Thanks for all the help, especially addragyn. I will try to learn SME my best. Thanks.

 

[skyking]

Addragyn, not to steal the thread, but do you think SME will work as a combo firewall/router, and also do some other duties on the LAN side? I looked through some of the documentation, and I did not see much mention of two NIC installations.

 

[Devistater]

Originally posted by: jtusa4
2K3 Server is easy to figure out. If you've messed with 2K Server at all, 2K3 will be very familiar to you. Active Directory will do exactly what you need as far setting access rights for users.

As far as the server is concerned, you don't need anything high end at all. You're basically talking just storage, domain controller/AD(all the graphics processing would be done on the local machines, not the server). I'd look at one of the Dell 400SC servers they are always selling on the cheap. Just add some memory and however much storage you need and you're good to go.

Thanks for mentioning dell, I'm going to need something like that for an organization I'm doing stuff for 🙂