VPN users cannot RDP to their machines at alternate location

[Tom Pajewski]

Users can connect using the VPN and RDP into machines on the local network. The problem is we have 2 sites. Users cannot RDP if their machines are located in the other office. I have tesed it and I can RDP into a machine at the local site, then RDP from that machine into the remote site. There is no connectivity issues between the 2 sites. I know I am missing something. The issue started when I moved from the Sonicwall VPN client to using the Windows VPN client and I configured RRAS. Am I missing a static route in the RRAS config or something?

[Big Fish]

First of all, it is not recommended to enable RRAS on a DC.

Secondly, I would setup a group policy to restrict TS/RDP users to access the Internet if they access to the DC. So, do you have group policy to block internet access?

[Tom Pajewski]

I do not have RRAS running on my DC. VPN/RDP users only have local access within the domain. But regardless, You did not answer my question.