how safe is Microsoft Terminal Server?

[dpopiz]

I'm planning to make 2 win2k machines on my lan into terminal servers so I can use them remotely from another comp on the lan and not have to keep hooking up a mouse, kb, and monitor to them. my lan is also connected to the internet (I have a simple firewall at least) and all the computers are win2k machines. is it safe to use TS on a lan that has access to the internet?

 

[Nothinman]

Depends on who's setting it up.

 

[FoBoT]

in the LAN you describe, where the boxes are internal to the firewall (to the internet) , you should be fine

as long as you aren't fowarding port 3389 from the firewall into the LAN

 

[dpopiz]

great

 

[err]

Also, look at this simple guide to secure your terminal server even more.

http://www.wowrack.com/support/Dedicated/win01.html#11

Hope this helps

eRr

 

[WarmAndSCSI]

When you set it up make a special "system" management account just for TS. I made a special account that was the only one that had access to TS. This account has a 64-character password that uses special characters and random characters that is essentially uncrackable. And make sure to keep encryption on.

 

[FoBoT]

Originally posted by: WarmAndSCSI
When you set it up make a special "system" management account just for TS.

good advice, on the servers with TS enabled that i setup , i do the same thing, only a single account has TS access

 

[Barnaby W. Füi]

Originally posted by: WarmAndSCSI
When you set it up make a special "system" management account just for TS. I made a special account that was the only one that had access to TS. This account has a 64-character password that uses special characters and random characters that is essentially uncrackable. And make sure to keep encryption on.

Woah, have fun typing that password out..

 

[WarmAndSCSI]

Originally posted by: BingBongWongFooey

Originally posted by: WarmAndSCSI
When you set it up make a special "system" management account just for TS. I made a special account that was the only one that had access to TS. This account has a 64-character password that uses special characters and random characters that is essentially uncrackable. And make sure to keep encryption on.

Woah, have fun typing that password out..

It's very fun - trust me.

 

[rh71]

Originally posted by: WarmAndSCSI

Originally posted by: BingBongWongFooey

Originally posted by: WarmAndSCSI
When you set it up make a special "system" management account just for TS. I made a special account that was the only one that had access to TS. This account has a 64-character password that uses special characters and random characters that is essentially uncrackable. And make sure to keep encryption on.

Woah, have fun typing that password out..

It's very fun - trust me.

You have it written out in notepad on your local machine, don't you ?

 

[randal]

Nah, it's probably something like

Aww man! Last night was such a bumm3r! I only got laid #3 times!

That's what I'd put at least ... you know, make myself feel good about who I am every time I TS into a server ... which is > 20 times a day ...

*loves terminal services*

randal

 

[WarmAndSCSI]

Originally posted by: rh71

Originally posted by: WarmAndSCSI

Originally posted by: BingBongWongFooey

Originally posted by: WarmAndSCSI
When you set it up make a special "system" management account just for TS. I made a special account that was the only one that had access to TS. This account has a 64-character password that uses special characters and random characters that is essentially uncrackable. And make sure to keep encryption on.

Woah, have fun typing that password out..

It's very fun - trust me.

You have it written out in notepad on your local machine, don't you ?

No, it's memorized.