Microsoft Remote Web Workplace

The Remote Web Workplace is a feature of Microsoft's Windows Small Business Server and the midsize business-focused product, Windows Essential Business Server, which enables pre-created users to log in to a front-end network-facing interface of the small business server.

After logging in to Remote Web Workplace (using their usual Windows domain username and password) a user can access enabled features of the Small Business Server or Essential Business Server such as Outlook Web Access, viewing of SharePoint pages and (if a machine is running and allows it) full remote control of client machines connected to a Small Business Server or Essential Business Server network.

Offsite Access
Remote Web Workplace is a feature of Windows Small Business Server and Windows Essential Business Server that allows access for users to facilities when they are offsite such as email, reading/modifying shared calendars and remote controlling a machine as if they are sitting in front of it.

Connection Options
When logging in to Remote Web Workplace, users can select the speed of their connection which then optimizes the connection features. Options are: Small Business Network (Intranet), Broadband, 56 kbit/s modem and 28 kbit/s Modem.

Means of Access
The Remote Web Workplace is a Web-based application and is accessed through a web browser. To control remote computers, a user is required to install a "Remote Desktop ActiveX control" into his/her web browser once, and only Internet Explorer is supported.

RWW works by proxying Remote Desktop via port 4125/tcp on the SBS machine to the usual RDP port (3389/tcp) on the internal client or server machine being reached. But as a security measure, 4125/tcp is not normally listening at all (attempts to reach it would produce "Connection refused" errors), and it listens for connections only when a user has requested a session via the web GUI.

Then, it will accept a connection only from an IP address which has a pending connection request, dropping all others. The port is closed once the proxy is set up. The usual RDP port of 3389/tcp is not exposed to the internet.