Re: Opening Port 3389

From: Jim Nugent (nuge_at_execpc.invalid)
Date: 02/09/04 

Date: Mon, 09 Feb 2004 02:30:45 GMT

"Lars M. Hansen" <badnews@hansenonline.net> wrote in message
news:ms9820dhhc0fuue6c3foms869dte7bu86n@4ax.com...

> There's only two ways of doing it:
>
> 1) The secure way: VPN, or
> 2) The insecure way: port forwarding.
>
> You might be able to restrict the access somewhat if you know the IP
> addresses of those useless people who need to access the TS. However,
> since they'll most likely have dynamic IP address, I foresee a
> management nightmare.

Remember that you can go into Active directory users and computers and
disable TS for all but the accounts that need it. That helps some. Also
depending just how dumb these people are you could set up very strong
passwords that they can't change.

I tried this once at a client site so my boss could get access but he forgot
the strong password and got locked out. Extremely Dilbert. 

-- 
Jim (for E-mail replace invalid with net)
"Remember, an amateur built the Ark; professionals built the Titanic."

Relevant Pages

  • RE: Where are Local Passwords stored on Win2K
    ... This should restrict the likely hood of have access to multiple server if one is to get compromised. ... Where are Local Passwords stored on Win2K ... compromises within our network. ...
    (Security-Basics)
  • Re: Blocking Accounts on Certain PCs
    ... As long as you're using passwords that are widely known, no, you can't stop anyone from using the computer. ... Through your domain policies, you can restrict, I believe, what machines a particular user can log on to. ... > We can't use private passwords on these accounts. ... >> Windows XP - Shell/User ...
    (microsoft.public.windowsxp.security_admin)
  • file sharing/passwords
    ... i am trying to find out how i could put passwords onto, ... or restrict who opens my shared files over a network. ...
    (microsoft.public.security)
  • Re: Complex Password policy doesnt set under the CP Applet..works fine from MMC
    ... > Local Policy is set to ENFORCE STRONG PASSWORDS. ... > password applet under the control panel it doesn't restrict it. ...
    (microsoft.public.security)
  • Re: GPO
    ... > I'm trying to set up a policy to restrict users from going to certain ... > As a test I went into the GPO Editor went into the User Templates, ... or simply put that site into the hosts file and point it to ... an amateur built the Ark; ...
    (microsoft.public.security)