Remote Desktop, DMZ

Dear All,

A Remote-Desktop system should be placed within the DMZ,
am I correct?

If that is the case, what if the Remote Desktop
system requires access to an application server; but,
this application server cannot be placed in the DMZ
because LAN users also need access to it?

I've been mulling it over and haven't quite
figured out how or where to put this remote desktop system.
In the DMZ, it will have a hard time being
part of the domain(is this actually necessary?)
or even access an application server (which
is also part of the domain). If I put
the Remote desktop system in the internal LAN,
the risks are not particularly appealing should
the RD system get compromised.

Can someone out there give me some hints/pointers
as to how I might go about in putting a remote
desktop system in an existing network setting?

Thanks

Ed

Relevant Pages

  • RE: Remote Desktop, DMZ
    ... Before placing the system in the DMZ, read about the DNS vulnerability ... Vulnerability in RPC on Windows DNS Server Could Allow Remote Code ... Subject: Remote Desktop, DMZ ... what if the Remote Desktop ...
    (Security-Basics)
  • RE: Remote Desktop, DMZ
    ... If you have to put a Remote Desktop enabled box in your DMZ for external ... build it internally first, completely patch and lock it down. ... Why are you looking to put a remote desktop system in your DMZ? ...
    (Security-Basics)
  • Re: Remote Desktop
    ... Port forwarding is also on the office router, ... > pc using remote desktop which is enabled. ... No need for the DMZ ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Remote Desktop
    ... No need for the DMZ which *fully exposes* the PC to the public ... Are you trying to use Remote Desktop to access the office PC? ... forward TCP Port 3389 through the router to the LAN IP of the PC your trying to access. ...
    (microsoft.public.windowsxp.work_remotely)
  • Remote Desktop to Computers within Network?
    ... :) I remote desktopped in to my "server" at home, ... my router with the DMZ and port opening. ... as it likely doesn't have remote desktop turned on. ...
    (microsoft.public.windowsxp.work_remotely)