Active directory ප්‍රශ්නයක්?

[starcred007]

Windows Active Directory Sever එකක් හදලා ඒ Domain ඒකට users and group policies add කරලා තියේ. මේ Domain එකට වෙනමම තැන් දෙකක තියෙන user PCs join කරන්න ඕනේ.
locations 3ම ඔක්කෝම user PCs 20ට අඩු ගානක් තමා තියෙන්නේ.
මේ තැන් 3ම manageable routers, switches මුකුත්ම නෑ. Normal 4g routers & unmanageable switches තමා තියෙන්නේ.
ඒ නිසා VPN එකක් through Domain ඒකට connect වෙන එක නේද කරන්න ලේසි?
Open VPN එකෙන් මේ වැඩේ කරන්න පුළුවන්ද?
එහෙම කරනවා නම් කරන්නේ කොහොමද?

 

[gamerlk]

@tharakaf

 

[tharakaf]

Windows Active Directory Sever එකක් හදලා ඒ Domain ඒකට users and group policies add කරලා තියේ. මේ Domain එකට වෙනමම තැන් දෙකක තියෙන user PCs join කරන්න ඕනේ.
locations 3ම ඔක්කෝම user PCs 20ට අඩු ගානක් තමා තියෙන්නේ.
මේ තැන් 3ම manageable routers, switches මුකුත්ම නෑ. Normal 4g routers & unmanageable switches තමා තියෙන්නේ.
ඒ නිසා VPN එකක් through Domain ඒකට connect වෙන එක නේද කරන්න ලේසි?
Open VPN එකෙන් මේ වැඩේ කරන්න පුළුවන්ද?
එහෙම කරනවා නම් කරන්නේ කොහොමද?

Opensource FW (nama mathaka ne ban) ekak use karala VPN terminate karapan. etakota umba kiyanawa wage remote set eka VPN through thama authentication anan manan karaganna wenne.

Kawadawath interent ekata protection nathuwa expose karana epa server, suddo awilla arala yai

 

[The Chairman]

Pfsense podi pc kallaka dala thama vpn eka terminate karanna wenne OpenVPN puluwan.

Eta kalin one nam PCs tika offline domain join karanna puluwan. Et loku wasiyak na policies update wenne na domain controller ekata line of site nathiwa.

 

[starcred007]

Opensource FW (nama mathaka ne ban) ekak use karala VPN terminate karapan. etakota umba kiyanawa wage remote set eka VPN through thama authentication anan manan karaganna wenne.

Kawadawath interent ekata protection nathuwa expose karana epa server, suddo awilla arala yai

Opensource FW = Pfsense eka neda machan?

---

Pfsense podi pc kallaka dala thama vpn eka terminate karanna wenne OpenVPN puluwan.

Eta kalin one nam PCs tika offline domain join karanna puluwan. Et loku wasiyak na policies update wenne na domain controller ekata line of site nathiwa.

Machan, OpenVPN eka establish karanna wenne VPS ekaka wage neda?
Domain controller eka thiyena location eke neda firewall eka thiyannath one?
------ Post added on Jan 15, 2024 at 5:47 PM

 

[tharakaf]

Opensource FW = Pfsense eka neda machan?

---

Machan, OpenVPN eka establish karanna wenne VPS ekaka wage neda?
Domain controller eka thiyena location eke neda firewall eka thiyannath one?
------ Post added on Jan 15, 2024 at 5:47 PM

Aaaah yea yeah pfsense. Normally VPN authentication ekath umbata AD ekata set karanna puluwan.

 

[starcred007]

Aaaah yea yeah pfsense. Normally VPN authentication ekath umbata AD ekata set karanna puluwan.

VPN eka widiyata OpenVPN ekak VPS server ekaka install kara nm hari neda machan?

 

[SuperiorWhite]

locations 3ම ඔක්කෝම user PCs 20ට අඩු ගානක් තමා තියෙන්නේ.

If the device count such low, why not migrate to Azure Active Directory?
Such a waste of resources to manage a whole AD server just for 20 devices.

Group policies still available via Intune (btw policy deployment slow compared to SCCM)

 

[lalindutj]

Windows Active Directory Sever එකක් හදලා ඒ Domain ඒකට users and group policies add කරලා තියේ. මේ Domain එකට වෙනමම තැන් දෙකක තියෙන user PCs join කරන්න ඕනේ.
locations 3ම ඔක්කෝම user PCs 20ට අඩු ගානක් තමා තියෙන්නේ.
මේ තැන් 3ම manageable routers, switches මුකුත්ම නෑ. Normal 4g routers & unmanageable switches තමා තියෙන්නේ.
ඒ නිසා VPN එකක් through Domain ඒකට connect වෙන එක නේද කරන්න ලේසි?
Open VPN එකෙන් මේ වැඩේ කරන්න පුළුවන්ද?
එහෙම කරනවා නම් කරන්නේ කොහොමද?

VPN haraha connect wela Domain connect unata
VPN as a Service auto connect une naththam ubata Account unlock PW Reset waladi kela wenawa (Security Issues thiyenawa me widiye)

1. VPN connect wenna log wenna one > 2. log wenna ba account lock nisa > 3. AD eken unlock karanawa > 4. Unlock kalata sync wenne na VPN connect wenna one > 1. VPN connect wenna log wenna one

 

[jehantheexplorer]

Opensource FW (nama mathaka ne ban) ekak use karala VPN terminate karapan. etakota umba kiyanawa wage remote set eka VPN through thama authentication anan manan karaganna wenne.

Kawadawath interent ekata protection nathuwa expose karana epa server, suddo awilla arala yai

Ub sysadmin knkd ntnm net engineer knk da

 

[kj1]

If the device count such low, why not migrate to Azure Active Directory?
Such a waste of resources to manage a whole AD server just for 20 devices.

Group policies still available via Intune (btw policy deployment slow compared to SCCM)

I think this SME is using Cracked AD as well.

 

[Any.key]

bump 1

 

[tharakaf]

Ub sysadmin knkd ntnm net engineer knk da

Oya mukuth new ban. Knowledge eka aawe itin field ekey wada karala experience eken.

 

[krizta]

TS Plus ganin ban..

or Azure AD!

 

[starcred007]

VPN haraha connect wela Domain connect unata
VPN as a Service auto connect une naththam ubata Account unlock PW Reset waladi kela wenawa (Security Issues thiyenawa me widiye)

1. VPN connect wenna log wenna one > 2. log wenna ba account lock nisa > 3. AD eken unlock karanawa > 4. Unlock kalata sync wenne na VPN connect wenna one > 1. VPN connect wenna log wenna one

Machan, open VPN client auto connect wenna hadanna puluwan neda?

 

[uthpalakalwana]

maseta licenses wlata ganak yata karnna pluwnm Azure AD thama hodama nettan Forti firewall ekak thama

 

[speedmalli]

Why bother with all that 2010 crap?

Azure AD enrol karapan. Through normal internet devices manage karanna puluwan.

Win server dala AD manage karana eka sahenna watha wadak. Godak welawata karanne Citrix tunnel ekak gahala manage karana eka oya architecture eka paranai dan.