How to organize VPN access to servers?

Question

VPN

There are several servers with RDP.
It is necessary that only office employees have access to it when accessing through a special VPN.
That is, it is necessary that you can connect to it only using our VPN server.
Servers pieces 10-15. It is necessary to organize access levels, for example - testers have access to one server, programmers will have access to others. Dedicated Server hosting with Windows Server 2008. There is a machine for VPN on Ubuntu server on the Internet. It is necessary that there be access from our local office in the office (there are microtics), and a person at home if he connects via VPN.
What is the best way to organize this?

Answer 1

There are several servers with RDP.

It is not clear if it is several servers or one. If there is one, then close access to it from outside and a) put a VPN server on it . b) Make a VPN server in the office, for example, on an existing router, and now, on the contrary, the server using the VPN client will connect to your network and will be in your local area.
In general, there are many options.
Specify this is a remote server? VDS Hosting? Is this a different office? your office? In general, any information gives a lot of nuances how to "do better".

Answer 2

Raise a VPN on Linux, get servers and Mikrot into it, cut the rights, Profit.