how to prevent users from using remote desktop to connect to home

  • Thread starter Thread starter Sinassah
  • Start date Start date
S

Sinassah

Hi,

Know of a way to prevent users from using the mstsc.exe to
connect to their home PCs from work?
 
Sinassah said:
Know of a way to prevent users from using the mstsc.exe to
connect to their home PCs from work?
Click to expand...
Block outbound TCP port 3389 in your firewall.
Click to expand...

That will work only so long as they do not know how to change the port on
their home machines.

You could add it to the "do not allow to run" list in group policy, but they
could still run it from command line.

I guess you could add it via the HASH instead of by name as well..

Truthfully, if your people are smart, they can get around just about
anything you do to get to their home machine (which you don't control.)
 
Shenan said:
That will work only so long as they do not know how to change the
port on their home machines.
Click to expand...

Then allow only outbound 80 and 443? ;-)
You could add it to the "do not allow to run" list in group policy,
but they could still run it from command line.

I guess you could add it via the HASH instead of by name as well..

Truthfully, if your people are smart, they can get around just about
anything you do to get to their home machine (which you don't
control.)
Click to expand...

Proxy server/ISA would prevent this too, IIRC....
 
Don't open any ports outbound in the firewall that aren't required. Proxy
web requests on port 80.
 
You can still tunnel... There is the HTTP-Tunnel service...


Jeffrey Randow (Windows Networking & Smart Display MVP)
(e-mail address removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone
 
<argle>

You can still tunnel... There is the HTTP-Tunnel service...


Jeffrey Randow (Windows Networking & Smart Display MVP)
(e-mail address removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone

Shenan said:
Sinassah wrote:
Know of a way to prevent users from using the mstsc.exe to
connect to their home PCs from work?

Lanwench [MVP - Exchange] wrote:
Block outbound TCP port 3389 in your firewall.

That will work only so long as they do not know how to change the
port on their home machines.
Click to expand...

Then allow only outbound 80 and 443? ;-)
You could add it to the "do not allow to run" list in group policy,
but they could still run it from command line.

I guess you could add it via the HASH instead of by name as well..

Truthfully, if your people are smart, they can get around just about
anything you do to get to their home machine (which you don't
control.)
Click to expand...

Proxy server/ISA would prevent this too, IIRC....
Click to expand...
Click to expand...
 
Back
Top