To allow users on the Internet to access your Web server, you can allow access to selected Web site directories or allow access to the entire default Web site.
Option
Description
Do not allow access to the Web site from the Internet
Click if you do not want any part of your default Web site accessible to users on the Internet.
Allow access to only the following Web services from the Internet
Click if you want selected Web-based services available to users on the Internet, but you do not want your entire default Web site accessible.
Outlook Web Access. Allows users to access their e-mail from the Internet using a Web browser. This Web service requires that users type https:// to connect securely from a Web browser to the Web server.
Remote Web Workplace. Allows designated users to connect to the local network from the Internet using a Web browser. Using the Remote Web Workplace, users can access Outlook Web Access, create a direct Remote Desktop Web Connection to client computers on the local network, view server performance and usage reports, use the Windows SharePoint Services intranet site, or download Connection Manager to configure settings for the remote client computer to use a virtual private network (VPN) or dial-up connection.
This Web service requires that users type https:// to connect securely from their Web browser to the Web server. Additionally, connecting to the Remote Web Workplace from the Internet allows users to access the local network without needing to create a VPN connection. Important
You must also select to allow access to Outlook Web Access, server performance and usage reports, and the SharePoint site if you want to users to access these services from the Remote Web Workplace.
Server performance and usage reports. Allows administrators to access server status reports. The performance report gives administrators a quick view of the overall health of the server and the issues that need attention. The usage report is a collection of statistics that provide business owners and technology providers with information about how server resources are being used.
Outlook Mobile Access. Allows users to access their e-mail from a mobile device.
Outlook via the Internet. Allows users to remotely access their e-mail from a client computer on the Internet using Outlook 2003, without needing to create a VPN connection. Instead, Outlook connects to the Exchange server through the Internet using remote procedure call (RPC) over HTTP.
This Web service requires that the client computers meet the necessary requirements.
Client computer requirements
The client computer is running Microsoft Windows XP Service Pack 1 or later.
You have installed an update that was released after Windows XP, or you have installed Windows XP Service Pack 2.
The client computer is running Microsoft Office Outlook 2003 or later.
You have an Outlook profile configured for the server.
For more information about configuring the client computers, click Information and Answers at the Remote Web Workplace. For more information about accessing the Remote Web Workplace, see "Connect remotely to the server" in Help and Support Center.
Windows SharePoint Services intranet site. Allows users to access the intranet Web site created by Windows SharePoint Services during Setup from the Internet using a Web browser. Important
If you create Web sites below the https://companyweb site in Windows SharePoint Services, they will also be accessible to the Internet when you allow access to the intranet Web site.
Business Web site (wwwroot). Contains the published content for the company's Internet Web site, which allows users to access the company's Internet Web site from the Internet.
Allow access to the entire Web site from the Internet
Click if you want your entire default Web site and the company's internal Web site accessible to users on the Internet. This includes the above listed services along with any additional Web site directories you may have created in the default Web site.
To verify which directories are in the default Web site, open the Default Web site folder in Server Management.
Where?
Advanced Management
Internet Information Services
your server name
Web sites
Default Web Site
Important
When you click this option, all Web site directories in the Default Web site folder will be available, including your company's internal site. By default, only authorized users can access your intranet site. Anonymous access is not allowed. Modifying the default intranet access permissions is not recommended.
Important
If you select to allow access to your default Web site or specific Web services, the necessary settings are configured on your server's firewall. For more information about these settings, click Start, click Help and Support, and then search for "Firewall Settings Configured by the Configure E-mail and Internet Connection Wizard."
If your network adapter used to connect to the Internet has a dynamically assigned IP address (using DHCP), your Internet service provider (ISP) must support dynamic updates of Domain Name System (DNS) records. Otherwise, when the adapter receives a new IP address from DHCP, DNS will not be able to resolve your server's Internet domain name with the IP address in the DNS records.
If your server uses ISA Server 2000 as your firewall and you have a dynamically assigned IP address for your ISP network adapter, Web services on your server will not be available to users on the Internet if the IP address of your ISP network adapter changes. You must either use a static IP address or request that your ISP not change the IP address assigned to your ISP network adapter. Alternatively, you can remove ISA Server 2000 and use Basic Firewall in Routing and Remote Access Service. For more information about modifying your installation, see "Modify your Windows Small Business Server installation" in Help and Support Center.
When the default Web site or selected Web services are accessible to the Internet, the IP permissions are set to allow access to all IP addresses. For more information about restricting specific IP addresses, see Internet Information Services Help. Click Start, click Server Management, double-click Advanced Management, right-click Internet Information Services, and then click Help. Search for "Securing Sites with IP Address Restrictions."
If you upgraded to Windows Small Business Server 2003 from Small Business Server 2000, and the Internet Information Services (IIS) Lockdown Wizard and URLScan security tool are installed, then by default executable (.exe) files cannot be requested through the IIS default Web site. As a result, if you try to download Connection Manager from Remote Web Workplace, you receive a "404 File Not Found" error. To resolve this problem, either remove the URLScan security tool from the IIS default Web site or modify the configuration of the tool to allow .exe files.