views:

773

answers:

13

What is the best way to enable remote access (for desktop support purposes) to a network where there is a single server on a fixed IP and a number of Windows DHCP clients (all with internet access, but the clients are all using NAT for external access)

+2  A: 

Maybe stupid answer - install Live Mesh on all machines and not depending on security policies you'll get desktop access as soon as port 80 is not closed. ) Cheers.

dimarzionist
A: 

If you only need access for one user/computer at a time, you can forward RDP (3389) then once connected to that machine you can RDP into any other machine on that network.

Just to be clear you have a connection to a publicly accessible machine, which has an RDP connection to another machine on the network.

This works well, but you can only have one user at a time.

Depending on the number of machines/security policies, you could use Live Mesh.

Eric Haskins
+4  A: 

We use Remote Desktop (comes with Windows XP pro).

We have also used LogMeIn

Nathan Koop
LogMeIn appears to be the best solution, thanks to everyone who suggested it.
DrStalker
+2  A: 

I've not used it, but I've heard that FogCreek's Copilot is good for desktop support (and it's Joel Spolsky's company :)

Glenn Slaven
They have a free (1-minute) trial. I've used it and it works really well.
JosephStyons
+2  A: 

I have used this in the past, adn it works well and can be used free:

https://secure.logmein.com/home.asp?lang=en

Has a very nice interface and can access any pc you have setup for it through the web, and across the firewall (as long as port 80 outbound is not blocked which i doubt or no one would be browsing the net ;)).

mattlant
Sorry nathan, i missed that you already linked Logmein.
mattlant
Nathan Koop
+2  A: 

One of the best tools to do that is LogMeIn because you don't have to deal with Nat / Ip or other technical (non-User) information. It's very fast and reliable.

I've use this tool several times and it works very well.

Fred
+1  A: 

Bomgar and UltraVNC are also very good. (I'm very happy with Bomgar; remote access to any client machine anytime with just a few simple clicks on their part -- even Macs. UltraVNC is a wonderful free cross-platform tool.)

John Rudy
Bomgar is a breath of fresh air.
Gili
A: 

We use TightVNC a free cross platform VNC. But Tight VNC isn't very secure in its self (the password is sent in the clear!) We use CopSSH and tunnelier SSH client. TightVNC and Tunnelier can be launched from a Thunbdrive and Tunnelier of course tunnels thus simplifying Proxy and Firewall issues.

A: 

ultravnc single click, lets users download a small (160kb) app and connect to you.

i have set it up with a local repeater and several incoming channels so that when users call us, we can tell them what channel to use, and they can connect to anyone in the office.

have only come across one place that has a firewall that stops it

bumperbox
+1  A: 

If you have an SSH server in the remote network, you can use an SSH tunnel to tunnel either VNC traffic or Remote Desktop traffic.

johnp
A: 

If you have a linux box at the remote end, and you can forward SSH (port 22) from the firewall to it, then you might consider NX from NoMachine. It can act as a VNC or RDP conduit to machines in it's local network.

Evan
+1  A: 

UltraVNC here.

Optimal Solutions
A: 

RealVNC http://www.realvnc.com/ is very friendly. They have a free version and a paid one with support. (I'm not affiliated)

rec