Remote Desktop - how do i improve security

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have implemented remote desktop on my pc (XP Pro) and can now access my pc
away from the office. I have also changed the port for accessing my pc.

My question is this - How do I improve security when i connect through
remote desktop?

Zap
 
The things I do include...

* Run Remote Desktop through a VPN or Secure Shell (SSH) tunnel. Personally
I use OpenVPN and a certificate and strong password for authentication. I
have done the same thing with Secure Shell (SSH) and a private/public key
pair protected by a strong password.

http://theillustratednetwork.mvps.org/OpenVPN/OpenVPN.html
http://theillustratednetwork.mvps.org/Ssh/SecureShell.html

* A strong password
* Configure the group policy to always ask for a password and use only
"High" encryption.

http://theillustratednetwork.mvps.org/RemoteDesktop/Images/RDPSecurityChanges.JPG

--
Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
 
Al,

Thanks for your comments.

If I choose to run OpenVPN how will i log on to my pc? Will it be through
remote desktop, or a different way? I am not that technical so I would like
to get a feel for the user experience as well as the implementation before I
set it up.

Zap
 
You would install OpenVPN on a desktop on your LAN or the PC you want to
remotely connect to with RDP. You would install OpenVPN, I recommend the
OpenVPN XP GUI software, on your remote PC or laptop.

The OpenVPN connection is made first from the remote PC/laptop, then you
would connect to your desktop with RDP through the tunnel. You would address
the desktop with its LAN IP versus a public IP when calling through the
OpenVPN tunnel.

For many users SSH may be easier to setup and use versus OpenVPN. Just a
thought...

--
Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
 
Back
Top