Multi Session Remote Access Software Server 2016

Greetings,

I have an amazon cloud server running server 2016 os and have been using a splashtop business account which provides a single remote user access to it (multiple users can only share a session and cannot have their own unless you go to enterprise which requires additional infrastructure).

I now have a requirement to have more than 1 user(1-5) remoting into the machine and working in 5 seperate windows users sessions.

I am wondering if someone can reccommend a safe and secure software solution that will not break the bank.

pretty much all of the remote access solutions i have looked up so far are geared towards single user access or they depend on you having an existing IT infrastructure of some sort to basically host the ras/vpn software services.

I would love to find something simple similar to logmein, splashtop, gotomypc etc. that supports multiple user sessions and is safe and secure.

In previous situations where more than 1 users is required to login I would simply just open rdp access in aws firewall to the end user static ips to give end users access via RDP, however in this case they need to be able to access it from multiple locations which have dynamic internet ips.

I am looking for something safe, simple and inexpensive. 2 step verification would be great..

I am familiar with vpn solutions like neorouter, hamachi (from years ago) but not sure how they stack up with regards to security when compared to splashtop pro, logmein pro etc. nor am i sure if an end users network admin would even let them install something like neorouter without throwing a fit..

anyways I would appreciate any advice you guys may be able to provide.

 

also I should say that I am aware of, but still fairly unfamiliar with AWS VPN. From what I have seen so far it seems like the hourly connection fees can add up quickly with 5 users and it may require more configuration time/hands on time to setup and I am still uncertain of how the security of this solution will stack up with me configuring it.

It seems to involve providing a certificate to end users which I am not sure I am comfortable with.

My current Splashtop solution has several "levels of authentication" in comparison. For example, if a user installs Splashtop and tries to login with the account I provide them I first get an email saying they are trying to login from XXXX PC and "do I authenticate it". Then when they try to login again the need to generate a PIN on a cell phone which is sent to the email address tied to the account..

I am also somewhat familiar with other VPN solutions which require a PIN to be generated on the local users machine via communication with server and then the PIN is used to login/authenticate though they have been for connecting to remote networks and not a single cloud server sitting by itself in an AWS instance..

With the AWS certificate and a generic vpn client it seems they could just copy it around to whatever devices they want and be connecting and unless I am monitoring a VPN console like a hawk I wouldnt really know what is going on..

I probably got at least part of that wrong.

A network specialist would probably agree that I am new to this specific requirement of trying to provide access in this manner (single cloud server requiring multiple windows sessions for remote non internal users without existing network VPN/infrastructure).

anyways I would appreciate any advice you guys may be able to provide.