How to set up secure remote access to Windows Server 2012R2?

Question

VPN

There is a home server running Windows Server 2012R2, on which Hyper-v is running with virtual machines on the same network as local computers, to which the Internet is shared via NAT, as well as access to files via SMB. One of the virtual machines is also running Windows Server 2012R2 as a domain controller with AD. The Internet enters the server itself through a regular router via NAT, which connects via VPN with a dynamic IP.
I want to make external access to the server so that not on the router, but in the OS itself, the computer connects to dyndns, and remote users connect to it via VPN, preferably L2TP, they have access to SMB with authorization through AD. To make it all safe for the system, in terms of attacks, "extra" ports are closed, perhaps some other nuances that need to be addressed.
Interested in how to implement all this, in which direction to dig, what you should pay attention to, advice.
I apologize for such a perverted request, I am not technically savvy in this regard, I have not studied anywhere))
All advice is welcome if you convince intelligibly, explaining that it is better to do dyndns on a port forwarding router is also good)
Thanks in advance.

Answer 1

Is this the scheme? /internet/ -> /provider(VPN)/ -> /router(NAT)/ -> /local network/ -> /Hyper-V/ -> /virtual server to be accessed/

Answer 2

no, /internet/ -> /provider(VPN)/ -> /router(NAT)/ -> /LAN and all
Hyper-V is connected to a physical adapter (connection type external network)

Answer 3

I configured the server to accept VPN connections and the client based on the following screenshots, after a long connection an error occurs. What am I doing wrong?

Answer 4

Maybe so? yandex.ru/yandsearch?text=%D0%BE%D1%88%D0%B8%D0%B1...