Remote Access provides secure remote access into the network over the internet.  A remote computer (client) wanting to log into the company network first connects to any public Internet Service Provider (ISP).   Next the client  initiates a VPN connection to the company VPN server.  Once the connection is  established, the remote client can communicate with the internal company systems over the Internet just as if it were connected locally.

VPN’s require detailed understanding of network security issues and careful installation/configuration to ensure sufficient protection on a public network like the internet. It must also be remembered  that the connection is only as good as the quality of the service the ISP provides. 

Terminal Services

This consists of four components.  The Windows Server 2003/8 multi-user kernel, the Remote Desktop client, the Terminal Services Licensing service and Session Directory Services.   This differs from remote access as the client attaches to the server and doesn’t see the actual server screen but a reproduction of their normal PC screen. (Assumes domain membership). 

Therefore, if a terminal-enabled client is at work, the server screen appears as if no one is using it and you don’t see a mouse moving on it.  The client doesn’t take full control of the server.  The server will maintain an independent session for each attached user. Provided there is a server version of the printer driver available, remote printing  can be used.



VPN or Terminal Services?

This depends on the application it is being used for.  The main difference is that the client using Terminal Services is actually working using  server resources.  The client using VPN is processing files on their local computer.   If there is not much data transfer but a large amount of processing and memory usage then the client would be better off using their own computer and not bogging down and slowing down the server.

However, if there is a lot of data transfer and database work then Terminal Services is a better option.  It should be noted that a Terminal Services CAL needs to be purchased for each user.
Note:  Terminal services for users on an SBS server is not a practical proposition  as only two incoming  connections are permitted by design.