Remote Desktop works fine. You'll just need to configure a few things. First of all he'll need to be running XP Pro on his desktop PC. In fact it's best if both machines use XP Pro. Then you'll need to setup a few things. The first thing I would recommend is to change the RD listening port for security purposes. It's simple--use this link for instructions.
Microsoft knowledge base There are plenty of sites to find available TCP ports to use.
Then set the encryption level to high (128 bit) on both machines. It's set to high by default, but to be sure you might want to do this: Open an MMC and add the "Group Policy Object Editor" snap-in. Browse to the "computer configuration\administrative templates\terminal services\encryption and security. Take it from there.
You'll need to use the virtual server or port forwarding option (depending on what your router calls it) on the router. To find his desktop PC IP address, use the IPCONFIG command in a command line window. Remember your boss needs to log into the router, so log the routers WAN address while you're at it. And of course he'll need to add the port number after the IP address in the RD connection box if you changed the default port address. Like this-- 1.1.1.1:
25000. Include the colon.
You also might want to remove him from the administrators account on his desktop PC. Then rename the administrators account user name and use strong passwords for both accounts. Be sure to add his account to the Remote Desktop group in the Local Users and Groups folder in the Computer Management applet found under Administrative Tools in the control panel. You should probably add him to the Power Users group while you're in there (depending on what he does on his desktop PC). Turn off the Guest account also.
NOTE: If you do the above, be sure to check to see if he can still access his programs and data while logged in under his account. If not you'll need to set permissions on whatever he can't access. Do that while logged in under the administrator account.
Don't forget to configure any firewalls that are on his desktop PC (remote computer).
I'm probably forgetting something. Please weigh in and add to this if you notice something I forgot.
I'm sure you know most of this already Rob, I just want to be thorough. It's no more than an hour or two worth of work to do all of it. And it's free!!
My biggest fear was that I would punch a hole through the firewall larger than necessary, and open us up to malicious attacks. But I think your instructions are thorough enough for me to do it safely.
