Terminal server virus threat

[Haifa]

Does the usage to terminal client(in administrative mode)
represent a virus threat?

How the terminal clients communicate with the terminal
server?

In accessing remote servers (Windows 2000) using terminal
client, does mapping of hard disks takes place?

Were there any viruses developed to attacked terminal
users.

What is the exact port used for the terminal server/client.

I need this info as I am setting up a firewall for our
netwrok and I need to assest what systems applications
are allowed.

THank you

 

[Dale Weiss]

Hello,

See answers below:

Does the usage to terminal client(in administrative mode)
represent a virus threat?

Not in my experience, other than the user can still do all of the same
unrecommended things a remote admin sessions as they can when logged on at
the console.

How the terminal clients communicate with the terminal
server?

Clients communicate via the RDP protocol over TCP. Traffic is usually
encrypted both ways depending on settings.

In accessing remote servers (Windows 2000) using terminal
client, does mapping of hard disks takes place?

Depends on configuration settings. Can be done.

Were there any viruses developed to attacked terminal
users.

Not in my experience, but it is possible in my opinion.

What is the exact port used for the terminal server/client.

3389 by default, can be changed via registry. Must be changed on both the
server and client.



Dale Weiss MCSA MCSE CISSP
PSS Security

This posting is provided "AS IS" with no warranties, and confers no rights.
Any opinions or policies stated within are my own and do not necessarily
constitute those of my employer. Use of included script samples are subject
to the terms
specified at http://www.microsoft.com/info/cpyright.htm