Member Avatar for irfan hassan

I need to know that can we access Windows Server user accounts from any where.

Any help will be appricated

  • 5 Contributors
  • 10 Replies
  • 327 Views
  • 2 Weeks Discussion Span
  • Latest Post Latest Post by irfan hassan

Dani AI

Generated

Yes — Active Directory accounts can be used from anywhere, provided domain authentication can reach the domain controllers over a secure network path. As asked, the first decision is what kind of access is needed (file shares, published applications, or full remote desktops). That choice determines the recommended design and user experience. and correctly pointed to VPN and Remote Desktop; the following practical guidance fills in the missing steps and cautions.

Common, practical approaches (given the static public IP mentioned by ):

  • VPN: run the VPN on the ISP router (only if it can forward authentication to AD via RADIUS/NPS) or run RRAS (Windows VPN) on a server behind the router and forward the VPN ports to it. Configure the VPN to authenticate against AD so domain credentials and group policies continue to apply. Prefer SSTP or IKEv2 over PPTP and protect the server with a proper certificate.
  • Remote Desktop Services (RD Gateway/RemoteApp): publish specific apps or desktops over HTTPS so RDP does not need to be opened to the Internet. This requires RDS roles and appropriate CALs but provides a cleaner app-only UX.
  • Cloud hybrid: sync identities to Azure AD / use Azure AD Domain Services or an identity broker if cloud app single-sign-on or modern MFA is desired.

Checklist and troubleshooting highlights:

  • Ensure VPN clients receive internal DNS (so domain controllers are resolvable) and that client time is synchronized with the domain (Kerberos requires close time sync).
  • Verify that shared folders are protected by NTFS/AD permissions (those permissions apply the same over VPN).
  • Start with a single test user from an external network and check authentication, drive mappings, and Group Policy application.

Security cautions:

  • Do not expose AD management ports or LDAP/RPC directly to the Internet. Use VPN or RD Gateway as a protective layer, enable MFA where possible, limit inbound rules to necessary ports, and keep servers patched and monitored.

Recommended Answers

All 10 Replies

Member Avatar for JorgeM

As long has there is network connectivity, then yes there are various options. Please provide more detail.

Member Avatar for boychungtinh.01101990

Windows Server is a tributary of the server, getting error reports related to a certain Services, you may find that inner Services "Service Control Manager", I could not find it.than'k..!

Edited by boychungtinh.01101990 because: error correction
Member Avatar for irfan hassan

Thanks Dear Sir JorgeM for your reply;
what kind of detail should I provide !! I want user accounts in Active Directory to be accessed from any network on the internet. Is this possible ?

Member Avatar for JorgeM

What kind of access do you want? VPN, RDP, mail, applications, etc.. What do want the users to be able to do?

Member Avatar for irfan hassan

I would like to give the users application access, and there are there shared folders different users have different permissions for that, can they access there accounts from any where ??

Member Avatar for cguan_77

as other suggested basically if you want to have Active Directory be available to your users outside the network you can implement:
VPN - vpn will give access to all shared devices, folders on your network and whatever rights you had set in AD it will be the same rights that will be applied when users are accessing VPN
If you want you can consider Terminal Services.

Good luck!!!

Member Avatar for irfan hassan

Thanks for the idea cguan 77,
Actually I am having VPN IP, but I didn't find any tutorial that can help me. Does any one have links to tutorials which will help me in my case.

Member Avatar for khakilang

Normally we use remote desktop connection. Key in the IP fix address and the ports it will connect to the Window server. As for application we will create user with minimum privilege from the Domain controller.

Member Avatar for cguan_77

@irfan, what you mean bt VPN IP? you already have a VPN setup on your network?
or you have a router from your ISP which is capable of VPN?

Member Avatar for irfan hassan

@ cguan 77, Thanks for your response
yes I have a router from my ISP which is capable of VPH. It's a static global IP address.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.