Allen's questions

I've got a 2wire router for uverse and I haven't been able to connect via RDP through this router. Here are the steps I've followed

• Setup a windows 7 box with RDP, patched and up to date
• Disabled the firewall temporarily on the windows 7 box
• Placed server in DMZ (2wire calls it DMZPlus or something)
• Attempted to RDP into the server.

It connects, authenticates (it will even alert me if the auth is invalid) and attempts to bring up the desktop but fails and says something along the lines of "encryption has failed, disconnecting". I'll update the question when I'm able to see the exact message again.

• Attempted to RDP into the server from another PC on the LAN, successful

So now I'm unable to completely connect to the RDP box remotely. I'll update the question with more precise settings and error messages when I get back to the server later on, but for now I'm looking for suggestions as to what to try.

Additional info:

The server and client are both windows 7 running the latest version of RDP and are fully patched.

We're on a corporate network thats running active directory and we'd like to test out some LDAP stuff (active directory membership provider, actually) and so far, none of us can figure out what our LDAP connection string is. Does anyone know how we can go about finding it? The only thing we know is the domain that we're on.

This should be a very basic question and I tried to research it and couldn't find a solid answer.

Say you have a web server in the DMZ and a MSSQL server in the LAN. IMO, and what I've always assumed to be correct, is that the web server in the DMZ should be able to access the MSSQL server in the LAN (maybe you'd have to open a port in the firewall, that'd be ok IMO).

Our networking guys are now telling us that we can't have any access to the MSSQL server in the LAN from the DMZ. They say that anything in the DMZ should only be accessible FROM the LAN (and web), and that the DMZ should not have access TO the LAN, just as the web does not have access to the LAN.

So my question is, who is right? Should the DMZ have access to/from the LAN? Or, should access to the LAN from the DMZ be strictly forbidden. All this assumes a typical DMZ configuration.