The rdp tag has no wiki summary.
13
votes
2answers
1k views
Hiding user account names from unauthenticated RDP sessions
This is for a Windows 7 Ultimate system, which is not a member of a domain.
When I log into the system locally, I am required to either manually enter my user ID or authenticate with biometrics. The ...
7
votes
2answers
472 views
What information is exposed by simply opening an RDP connection to the internet?
Microsoft, Rackspace and other hosted providers allows people to RDP into that server.
Here are a few examples: Microsoft has something called "Azure Connect" it is very easy to expose a domain ...
5
votes
2answers
1k views
Is opening port 3389 on a router and forwarding this to a Windows SBS 2003 server secure?
I know of a company who has port 3389 open on their router and forwards this to a Windows SBS 2003 server. The server has the Windows firewall switched on, is patched and has an up to date antivirus ...
5
votes
1answer
105 views
Is there a secure way to have a publicly facing terminal server?
TL;DR We are looking at opening port 3389 for a terminal server all the advice I’ve seen is that its suicidal but without good explanations as to why. Is it really that bad?
We are looking at setting ...
5
votes
2answers
255 views
Connection on port 3387 Event viewer says “authorized”
This event shows up multiple times within a minute like it was being brute-forced, but it says "authorized". My question is: Is there anyway I can see any commands that came in from this connection? I ...
5
votes
2answers
340 views
How can Network Disconnect be implemented for RDP on a Windows system (2003/XP or later)?
From NIST SP 800-53, Rev. 3:
SC-10 NETWORK DISCONNECT
Control: The information system terminates the network connection associated with a
communications session at the end of the session or ...
4
votes
4answers
144 views
Enable RDP for internal network only
I just got a tablet and I want to use it to RDP into my main computer. The thing is, the first thing I did when I set up my PC was to disable RDP. I am not comfortable, and have no use for, allowing ...
4
votes
3answers
977 views
Is there a compelling reason to ssh tunnel RDP connections?
We don't run any Microsoft products natively in our office, but there are a few folks who use a linux RDP client to access an application on remote virtual desktops with a service provider. Would it ...
3
votes
1answer
156 views
How do I configure Terminal Server (and clients) for use over untrusted Wifi networks?
Suppose a client wants to directly connect to Terminal Server exposed to the Internet, without a VPN, ... what software & settings is needed to properly protect against WiFi based attacks? ...
3
votes
1answer
136 views
Is RDP an effective security barrier
If you need to provide access to a GUI / GUIs in one network from within another network, can RDP (e.g. via Terminal Services) be used as an effective security 'barrier', to stop any other direct ...
3
votes
3answers
257 views
Dedicated Server in Cloud Environment - SSL Remote Login vs Dedicated VPN
Thanks for taking your time to look into this question.
Background
I have my website hosted in a dedicated server in the cloud. The server is a Windows 2008 R2 machine. To publish I FTP files to ...
3
votes
1answer
354 views
Saving connection parameters in an RDP file
For connecting to a remote Windows Server 2008 I use a standard Windows 7 RDP remote desktop connection. In an RDP dialog there is an option to save connection parameters to an RDP file to use it ...
3
votes
2answers
210 views
RDP - Same login sufficient?
I just authorized remote access to my Windows 7 machine (not using NLA, since I run a mainly Linux network). I diabled Remote Assistance.
My user (JoeBlow) is protected with password 123456 and ...
2
votes
2answers
412 views
Can a virtual machine program view a host machine's connections?
I don't really know anything about computers. I need to run a virtual Windows machine inside an Ubuntu system. My current setup uses a stripped down version of Windows XP on VirtualBox. I intend to ...
1
vote
2answers
291 views
Unauthorized activity on port 3389
If you detect activity on port 3389 (the mouse starts moving) What is the first steps you should take from a security standpoint, and who should be notified?
1
vote
3answers
2k views
What is the threat of having the clipboard enabled on Citrix and other rdp?
It is a question I have had for some time which I have never received a solid answer on. It seems most infosec teams prefer to disable clipboard functionality on Citrix and other RDP setups. What is ...
1
vote
1answer
860 views
RDP vs. VNC when looking them from security side
Regarding:
http://unix.stackexchange.com/questions/12924/ssh-tunnel-with-vnc
Which one would be better, if we look it @security side?
I heard that RDP is very very poor when it comes to security.
1
vote
1answer
315 views
Failed RDP brute force attack from Microsoft IP address?
I use RDPGuard on my webserver. I have noticed that it blocked an IP address which seemed to originate from a Microsoft registered IP address:
Process Information:
Caller Process ID: 0xf78
Caller ...
1
vote
1answer
114 views
Implementing Secure Remote Password with Remote Desktop Application
I had read the Secure Remote Password Protocol paper written by Tom Wu. This protocol is resistant to dictionary attacks. I have also go through some papers regarding to VNC attacks due to weak ...
1
vote
2answers
115 views
is RDP7.0 authentication process secure enough?
Latest version RDP used NLA, CredSSP and TLS to secure the authentication process. It sound like secure but in reality does it really secure enough. I knew that the previous version RDP is ...
1
vote
1answer
189 views
How am I able to use Input Director when one machine is VPN'd into work?
So - I don't actually have a problem, but I'm really curious, because apparently VPN's don't work the way I thought they did.
It was my impression that when I VPN into my office, my computer is ...
0
votes
3answers
3k views
Win Server 2008 RDP Attack
On one of my machines I run Win 2008 R2 server. It has been recently updated. My RDP session is limited to my IP address only and firewall is UP. Even though the main RDP post 3389 is blocked by ...
