What are the security implications of running a Windows RDS farm vs. just using RDP for remote administration?
closed as too broad by Polynomial, Steffen Ullrich, schroeder♦ Feb 24 at 9:38
Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.
Two ways to answer this question. Since this is a Security forum let me answer security wise first.
RDP is the protocol used to connect to Windows, whether it is for administration purposes or to just run a remote desktop session, to access applications that you would not be able to run elsewhere. Where the security footprint changes is between the administration usage and remote desktop usage. Specifically administration usually means only administrators of the server log on to perform short tasks or to hop to another server, whereas an RDS installation intends to put non-administrators on the server and usually in much larger numbers. Larger numbers of users, more applications and less IT experience usually creates security risks that would not occur in administration usage of the server. Also, installing several RDS roles to enable "remote desktop server farm" functionality changes the security of the server. On one hand more services mean more vulnerabilities to exploit, on the other hand it could mean a better security posture when exposing that RDS infrastructure to the internet. What I mean here is, internet access to a single Windows server with just the RDP port (tcp 3389) exposed for administration is relatively unsafe, but when running a full RDS infrastructure of servers, you would only expose port 443 (SSL/TLS) of the infrastructure, which is what most servers on the internet expose already.
The other answer is as Nomad already posted - RDP is the protocol used for administration and in RDS farm access, and RDS is a suite of Windows roles you install on one or more Windows servers when you want to securely host a large number of users by providing them Windows based desktop and or/applications, in an RDP session.