We're currently planning out our company's network and server implementation. I need to take a decision as to whether VPN will help my particular need or not.
We have a database system in place that needs to be accessed by our personnel out in the field. Each employee will be issued a particular laptop to carry with him out into the field.
So naturally, we assumed they could be granted access to our database (which is accessed by a web server through stored procs) via VPN.
But after reading up a bit on how VPNs are implemented in Windows Server, it is my understanding that VPN connectivity is granted to particular domain users, and not computers. Is that correct? Which also means that as long as any Windows computer anywhere
in the world (be it a desktop or a laptop) has an internet connection, the person who has been assigned the domain user credentials can open up a VPN connection to our server from that computer, and access the resources he has been granted permissions on.
Is this assumption also correct?
If this is the case, is there any way I can restrict the logging onto our VPN server to only the specific laptops we hand out to our employees?
↧
Is it possible to limit which specific computers can access a VPN server?
↧