Remote Access [Resolved]

We have an SBS 2003 server here connecting to a router. On this server we have VNC, and Netmeeting, plus remote desktop installed.
At the moment our external IT company can connect through our router and have full access to our server. Is there a setting anywhere which prevent all remote access originating from outside the LAN. Basically in the old days my boss used to unplug a modem until they needed access then he would go and plug it in again because he just doesn't like the idea of all these external IT people just connecting and changing things whenever.

If you are just dealing with one server right now you can activate the firewall feature on the network adapter or create some security policies. However, this isn’t going to cut off their access to the network (just the server). Your best bet is a hardware firewall which will protect the entire network behind the router.

You can set the router not to forward any packets. Have them call you when they want access, and you can turn it back on. You don't have to tell them. They will call you when they can't get in.

If you're running SBS 2003, and if you have Microsoft Internet Security and Acceleration server (ISA Server) installed, it will do the job just fine. Just set up a rule to disallow connections of 3389 (RDP Port) and they won't be able to use Remote Desktop to get through it anymore. If you have ISA Server 2004, it's even easier.

Thanks some food for thought, will look into these.