1

Here is my setup: Static IP assigned to a home UVerse router. I have a Windows 7 Professional based web server running which is accessible from outside. And so is a Remote Desktop port--accessible from outside. I can also access everything via TeamViewer from the outside.

What I need to figure out is how to allow a remote user to view a website hosted on my server. While the website itself is accessible there are some internal resources (on local VMs) which can't be seen unless I launch the browser from within the home computer.

I had looked into VPN but the router doesn't support that. So the next option would be to add a new user to the computer, and grant that user access to Remote Desktop group but I only want the user to launch the browser windows after RDP to the system. So, using Parental Controls, I disabled all programs for the user and only allowed access to Firefox. But, when I RPD as that user I was still able to launch Internet Explorer and, more importantly, was able to see home network drives--some of which are protected.

Is the higher access because I added the user to the RPD group? If so then how can I create a very restricted group which would allow RPD but only allow browser launches. Or maybe run some proxy server to the protected internal resources?

Thanks!

PS. Please note: Allow other remote access computer for browser only will has not worked for me.

Community
  • 1
IrfanClemson
  • 252

2 Answers2

1

Solution 1 :

You need to setup a VPN network, the server would be on your computer not your router Related link 1 Related link 2

Solution 2 :

Setup a remote RDP on a virtual machine hosted in your computer

Solution 3 :

Use sandboxie to limit RDP access (not easy to do)

intika
  • 1,383
0

I was pressed for time and, as you can see from my Comments to @intika, I was working on a URL Write solution but was not making any progress. So I ended up using port forwarding on the router for port 6080 (where the internal server resides). I was trying to avoid that solution because in the 'live' application we use port 80 for the internal server.

But time was too short. I had to move on. But at least I learned some new things about URL Rewrite and Reverse Proxy.

Thank you.

IrfanClemson
  • 252