Connecting ONE remote PC to SBS 2003

We're running 1 SBS 2003 server on our network of 20 users.

We have 1 and only 1 remote site with a PC, shared by 3 users, that we would like to connect into our accounts software on the SBS.

I have setup a VPN across a broadband connection from this site and accessed the network drives successfully.
I have also used Terminal Services (Remote Desktop) to access the SBS server directly and ran the accounts client software located in C:\Program Files\....\.... (the server side software installed on network drive G:\....\...).

However, this is using 1 of the 2 licenses that come with SBS and they only allow for the Server Admin user to connect remotely using RDP.

Is there a way of locking down 1 of these licenses to deny access to the admin functions on the server (only allowing access to the accounts software)?

Could we purchase 1 additional TS license (per user) install it on the SBS Server and deny access through group policy?

Or is it the case that we must purchase an additional server + server 2003 + TS licenses to allow this 1 PC access to the software on SBS Server (an exspensive solution!!)?

I would be grateful for any help or advice in avoiding emptying the MD's wallet further (the SBS and the 20 PC's all new!).

Neil

 

You could install terminal server in application mode and just purchase a licence for your offsite user. I don't think the licence is very expensive $120 or so.
If the offsite user also authenticates against your DC you could just move the account into a different OU then lockout certain features.