full-disclosure - RDP, can it be done safely?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Wed, 9 Jun 2010 13:35:22 -0700
From: "Daniel Sichel" <daniels@...derosatel.com>
To: <full-disclosure@...ts.grok.org.uk>
Subject: RDP, can it be done safely?

We have a boneheaded group of software developers who even in this day
and age eschew the client server model of software for the easier dumber
run it from the console school of design. So I have this idiotic Windows
accounting application that MUST run on an application server, cannot be
run from a client.  Rather than have my accounting department log in
directly to the physical box, I would like to have them use some flavor
of terminal services on my Windows server. My question therefore is, can
I turn on RDP safely, without exposing my Windows server to risk of
exploitation?

Thanks for any help you can give.

Dan S.

Content of type "text/html" skipped

Download attachment "image001.gif" of type "image/gif" (92 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/