Thanks Mike.
Initial thoughts for securing the connection include ...
- removing 'administrators' group from being eligible for RDC connection -
allow only the user who normally uses the computer to be able to connect
- only allowing remote connections if the terminal is currently logged in,
and then only allow the currently logged in user to connect
- If you 'save password' in a RDC file, how secure is it? Are there any
known vulnerabilities?
- Are there any local security policy settings that can be tweaked like "if
XX failed connection attempts disable the service and make a note in the
event log"
I was hoping either someone could point me towards Microsoft's, or there was
a commonly implemented checklist of things to do...
-Gary