Remote desktop security

[GeorgeC]

Hi
We are a small network with 1 2003 server with AD, 10 users. I would like
to setup my XP workstation
for my remote access. I have configured the firewall and router to allow
traffic to port 3399(I would change the deault port on my XP) I also
set the security level to high and enabled secure server in gpedit.msc. My
question is how secure is this. I have valued info on that workstation.
We have a consultant with $$$ on his mind and he told me I should secure
that connection with a VPN. Any input is appreciated

regards
George

 

[Sooner Al [MVP]]

Hi
We are a small network with 1 2003 server with AD, 10 users. I would
like to setup my XP workstation
for my remote access. I have configured the firewall and router to allow
traffic to port 3399(I would change the deault port on my XP) I also
set the security level to high and enabled secure server in gpedit.msc.
My question is how secure is this. I have valued info on that
workstation. We have a consultant with $$$ on his mind and he told me I
should secure that connection with a VPN. Any input is appreciated

regards
George

You might consider changing the default TCP Port 3389 to something else, ie.
a random high number port like 45305 for example. Otherwise your pretty
safe. I would strongly consider the VPN suggestion however. That is what I
use to access my home LAN...

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

 

[MSNews]

Does XP support inbound VPN connections? Is there a setup doc?

 

[Sooner Al [MVP]]

Does XP support inbound VPN connections? Is there a setup doc?

Yes, you can have one incoming PPTP VPN connection at a time to a XP box.
See these pages for help...

http://www.onecomputerguy.com/networking/xp_vpn_server.htm
http://www.onecomputerguy.com/networking/xp_vpn.htm

My small write-up. Ignore the PocketPC section...

http://theillustratednetwork.mvps.org/WM2003/WM2003PPTPVPN.html

Firewall and testing issues. Ignore the Vista sections...

http://theillustratednetwork.mvps.org/Vista/PPTP/PPTPVPN.html
http://www.microsoft.com/technet/community/columns/cableguy/cg0105.mspx

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...