I set a up a server a little while ago using Windows Server 2008 R2. I am very much learning as I go, but it's been running quite happily for several months now, so I think I got things right.
This past week though, our primary decals designer revealed that she will move to Taipei to get married. The boss has offered to let her continue working with us.
But this means that I need to set her up to be able to interact with our server via the internet.
The big scary internet + my nice innocent, pristine Server.
The BIG Question: How do I keep my Server safe from haxxorz?
Our site came under attack within hours of going live and after I did my maintenance and installed some security, it still reports black hatters bouncing off the walls every 3 weeks or so.
At this point we have 2 machines that are in need of being set up for remote access to our server, so I am thinking L2TP + some basic access. I've been doing some reading up, but it seems that there are many options.
There's also the question of the possibility of setting up some manner of VM for remote access...
I wouldn't even know where to begin with that.
It's also very important to note that the primary remote user, who will be in an entirely different city will probably not give me full access to her computer and she does not speak English, and will be using her own computer, possibly using Win8 or Win7 or maybe even Vista.
The other machine I use is dual language Win7 Ult and I will use it as a testbed.
Suggestions? Where should I start reading? I'm looking for short, sweet and simple here.
I feel fairly sure that this should be possible.
I've also got a strange feeling that having never touched the remote access portion of my server, it has been vulnerable to some degree since the day I turned it on and setting up remote access might not actually increase the risk significantly.
I appreciate your responses.
-k