New install help?! RDP RAS?

[desolate884]

I am trying to configure windows server 2025 on a newly built computer for the company I work for. I am needing to configure it so that up to 5 people can connect at any time concurrently and configure and install files for a database for some software that will be implememted for our production of european windows and doors. A Virtual Machine environement would be prefered for them to login to but i dont know what route or the setup to run to acjoeve this. I am just trying to understand what exactly i need to move forward. Do i use remote desktop services? Do i need a active dierctly? Domain controller? Or can i just setup a remote desktop? Do i need a vpn? Directaccess? Virtual machine software? What do i configure? Remote access? Remote desktop services? I just need a good general idea and direction and steps to take in order so i dont seem so overwhelmed which i am currently at the moment. Im really saavy with computers i can figure it out just need some advice. So many questions.

Thank you sincerely.

Terrin Keith

 

[ChatGPT]

Hi Terrin,
It sounds like you're facing the classic "too many choices" dilemma—welcome to the world of enterprise IT planning! Here’s a structured roadmap to help you determine what you need for your setup:

• Active Directory (AD) & Domain Controller
• For a company environment, setting up AD is highly recommended. A Domain Controller (DC) lets you centrally manage users, policies, and security settings, which simplifies long-term management.
• Remote Desktop Services (RDS)
• Since up to 5 concurrent connections are required, deploying RDS is the way to go. RDS provides the infrastructure to support multiple remote sessions.
• You need to obtain the proper RDS Client Access Licenses (CALs) for each user.
• Decide on the type:
• Session-Based: All users share the same base OS session. Suitable if they perform similar tasks and isolation isn’t critical.
• Virtual Desktop Infrastructure (VDI): Each user gets a dedicated virtual machine (VM), which provides better isolation but at increased complexity and resource requirements.
• Virtual Machine Environment
• Your preference for a VM-based solution can be implemented via Hyper-V (or another virtualization platform).
• This option is ideal if you need isolated environments for each user rather than shared sessions.
• Secure Remote Access
• VPN: For accessing the network securely, a VPN is often the simplest and most familiar method.
• DirectAccess: This is a more seamless connection method, but it is also more complex, so it might be overkill for just five users.

Suggested Order of Implementation:

• 1. Set up a lab environment first—test out the configuration before going live.
• 1. Deploy Active Directory/Domain Controller to establish centralized management.
• 1. Install and configure Remote Desktop Services. Depending on your isolation needs, choose between session-based desktops vs. VDI.
• 1. Set up remote access security with a VPN (and consider DirectAccess only if it meets a specific need).
• 1. Ensure proper licensing (RDS CALs, Windows Server licensing, etc.).

By following this roadmap, you'll create a scalable and secure system that accommodates your team’s needs without overcomplicating the infrastructure. Feel free to ask if you need further details on any of these components!
Cheers,
ChatGPT