Remote Access to Win Server based on ip and username


Recommended Posts

Didn't say WIN server, I said VPS which is what you stated your running on. That is just a Virtual Machine. If gets loaded time can drift, etc. They are not the greatest at keeping time ;)

--

http://www.vmware.com/files/pdf/Timekeeping-In-VirtualMachines.pdf

Because virtual machines work by time sharing host physical hardware, they cannot exactly duplicate the timing activity of physical machines.

--

This is going to be the same for any VM tech, by the very nature of how a vps work your never going to get actuate time on a VPS, its going to drift and drift and drift, you can keep adjusting it.. But its going to be spot on ever..

As to your IP, use 1XX.176.0.0/16

Amazing how it travels into the future 23/12/13 and then back to nov with 26/11/13

As to speeding it up ;) Again its a VPS!! Buy more slices, etc.

Link to comment
Share on other sites

Thanks for your support and patience BudMan. Since I am not facing any issue as of now I will continue to run that program in the VM itself. In rare cases program automatically adjusts the time if there is a drift so I am not worried.

 

On the I.P front I will put 1XX.176.0.0/16 and hopefully it should work. I just hope that my starting ip doesn't change. I need to see if I can turn off unnecessary services to make the machine run faster. :shifty:

 

Cheers. :)

Link to comment
Share on other sites

Highly unlikely, since they can only use the networks they own.. Class B or /16 are not cheap.. Depending on what company it is, can not tell since you didn't give the first few octets to do a whois on.

If it does then just add that /16 or netblock as well. They only own a tiny fraction of the internet I assure you ;) So locking down the the firewall to only the netblocks your isp owns blocks out 99.9999999% of the world so should be fine.. Unless the hackers are on your same ISP ;)

As to services you could turn off, yeah sure there are a few - doubt they will make much difference in performance even you turned off everything your not using.

Link to comment
Share on other sites

Thanks a lot. One last questions. Is it possible to restrict a particular user by ip. Right now if I configure firewall with 1XX.176.0.0/16 it will effect my login (admin) also. But can this block be set for just a particular user only.

 

B.t.w. I ain't worried about hacker, just that the office guy should access from office only.

 

Cheers.

Link to comment
Share on other sites

No it is not with the windows firewall. Not unless your on the same domain where endpoint can see the AD for users and computer, then you could lock down to specific computers if using secure connections only.

You can add more than one netblock, so add your home block, starbucks, where ever you might want to access it from. So unless he is using the same isp very close to where you live its highly unlikely he would have IP in the same network.

If use used a vpn to access your server, you would have much tighter control over from where and what and when he could access via vpn.

Link to comment
Share on other sites

I have never seen such an application - and have been in the business 30 years. What is the time source for this application? You see new stuff all the time - what is the name of this application, you have me curious!

You do understand that if time is a factor that a Virtual machine is prob not the best thing to be running an application on that is time sensitive.. You should prob be on actual hardware.

 

 

Budman, correct me if I am wrong but isn't this just asking for authentication problems? If the time has been changed on the users system and this doesn't match the DC within a limited tolerance, wont he get errors when logging on?

 

EDIT - just read the rest, only a few seconds but if this got out of sync by a small margin then doesn't the above still stand?

Link to comment
Share on other sites

He is not talking a users system and authing to a domain from a machine that is a member of that domain, etc.

But yes, in a domain you would want all machines to be using the same time source. A few seconds here or there is not going to matter, but in a domain you would want all your machines using the same time source.

And yes if time is off by too much on a domain member, it could have issues with auth in the domain.

Link to comment
Share on other sites

  • 3 weeks later...

Thanks a lot for your help BudMan. :)

 

As per your previous statement "Not unless you are on the same domain where ...." How do I check this? This is a normal VPS server so do you think its possible ?

Link to comment
Share on other sites

Its a VPS, did you create an Active Directory domain? I doubt it - do you run one locally did you join the VPS to yours as member or DC?

Link to comment
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.