View original (French)

RDP and OpenVPN issues

Solved
kefar -  
 kefar -

Hello,

Here is my issue:

I have set up an infrastructure with a server machine that brings together my servers (DHCP, DNS, AD, OpenVPN) and two user machines on the same network and domain.

I also have a physical machine that is outside the local network and thus outside the domain, but on which I have configured an OpenVPN client to access the local network.

The goal is to connect via RDP from my physical machine to one of my VMs on the local network (Server Machine, Machine 1, or Machine 2).

OpenVPN is well configured, and my physical machine can ping all the machines on the local network, and vice versa, all my machines on the local network can ping my physical machine.

I have three profiles that I use: Administrator, User1, and User2.

On each VM, remote desktop connection is enabled, and the users allowed to connect to each machine are also configured.

On each VM, the Administrator, User1, and User2 accounts can connect via RDP to any other machine.

I also want to specify that there are no GPOs enabled.

But here is the problem:

When I try to connect via RDP from my physical machine to one of the local machines using (Domain Name)\Administrator it works on all machines, and the connection goes through.

But when I use (Domain Name)\User1 or (Domain Name)\User2 it does not work, and I get this error message:

The system administrator has limited the computers from which you can connect. Try connecting from another computer. If the problem persists, contact your system administrator or your technical support service.

Does anyone have a solution to offer me?

Thank you in advance :)


6 answers

  1.
    yg_be Posted messages 23437 Registration date   Status Contributor Last intervention   Ambassadeur 1 588
     

    Hello,

    Are the accounts (Domain Name)\User1 and (Domain Name)\User2 indeed in the "Remote Desktop Users" group?

    0
  2. yg_be Posted messages 23437 Registration date   Status Contributor Last intervention   Ambassadeur 1 588
     

    Why did you write "outside the local network and therefore outside the domain"? Nothing prevents a computer outside the network from being part of a domain.

    0
  3. yg_be Posted messages 23437 Registration date   Status Contributor Last intervention   Ambassadeur 1 588
     

    In the definition of User1 & User2 in the AD, how is the list of computers from which they can connect defined?

    0
  4. kefar
     

    I forgot to specify, in fact, Users 1 & 2 are indeed part of the "Remote Desktop Users" group. Moreover, for User 1, I placed him in all the administrator groups just to run some tests, but it's still not working.

    In the AD, for each User, in the "Account" tab and then "Workstations accessible," the machines I want to connect to are correctly listed. Was that your question?

    Regarding the out-of-domain part, I wrote that because the computer is off the network and it is outside the domain of my local network. Furthermore, when I tried to add my physical machine to the domain, I received a message indicating that it is impossible to contact the AD for this domain. I am still a student, so I don’t have the solution for that either.

    I was actually focused on the question, thinking that if it wasn't working, it was probably because my physical machine is out of the domain. Do you have any ideas?

    0
    1. yg_be Posted messages 23437 Registration date   Status Contributor Last intervention   1 588
       

      1) Is the "physical" computer in the list of accessible workstations? If not, this explains the error message.

      2) "Unable to contact the AD", probably a name resolution issue.

      0
  6. kefar
     

    Yes, that's great, it works. Indeed, in the list of workstations, I hadn't specified my physical machine because I thought it wasn't necessary, so I added it and it works now.

    At the same time, I just checked for the DNS; the problem came from my OpenVPN network card where I hadn't entered the IP address of my DNS server, so I couldn't add my physical machine to the domain. The problem is now resolved.

    Thank you very much for your help!

    Have a good end of the day.

    0
    1. yg_be Posted messages 23437 Registration date   Status Contributor Last intervention   1 588
       

      When the physical computer connects via OpenVPN, I assume it continues to use its initial DNS, not the DNS of your infrastructure. I see that you have adapted that in the meantime.

      0
  7. kefar
     

    He used the DNS servers mentioned in the "push dhcp-option DNS" parameter of the OpenVPN configuration file that I had left by default.

    So I also modified this parameter in the config file, and now the machine is indeed on the domain.

    Once again, thank you, it was just a small oversight, but I’ve been stuck on it since yesterday (regarding RDP). After looking extensively online, I found nothing, which is why I posted this announcement!

    0