Re: Terminal services

From: Mark Mancini (info_at_NOSPAMmcse2000.com)
Date: 05/20/04 

Date: Wed, 19 May 2004 21:23:31 -0400

STeve, no, you DON'T need a VPN to add security to TS.....it will only
REDUCE it. TS should be setup with high encryption for 128 bit encryption.
He is using it for admin purposes, and shouldn't need access to LAN
resources. While he is an admin, he maybe accessing it from his family
computer and putting a PC on a company LAN like that is LESS secure than
SBC. 

-- 
Sincerely,
Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I 4&2000
www.MCSE2000.com
www.AppLauncher.com
"Steve Foster [SBS MVP]" <steve.foster@picamar.co.uk> wrote in message
news:xn0diglqj3xutb801e@msnews.microsoft.com...
> Kevin wrote:
>
> > I want to use TS to remotely admin the server, what port
> > does TS use so as I can set my router to forward to that
> > port?
>
> TCP/3389.
>
> Note that it's usually a good to set up VPN and then use TS over VPN
> rather than directly. This has the added advantage that you can access
> any LAN resources, not just the server.
>
> -- 
> Steve Foster [SBS MVP]
> ---------------------------------------
> MVPs do not work for Microsoft. Please reply only to the newsgroups.

Relevant Pages

  • Re: Terminal services
    ... TS should be setup with high encryption for 128 bit ... He is using it for admin purposes, ... > access to LAN resources. ... The default configuration for a VPN connection is more secure than ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: VPN routing from NAT to NAT
    ... if you are willing to lose all LAN connectivity while on ... the VPN, you can perhaps coexist on the same subnet.. ... If you are both using the same private network for your LANs, ... >VPN adapter, because that address is now bound to the VPN adapter and ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Multi-homed server and VPN
    ... The idea was to separate the LAN traffic from the VPN ... bound for the Internet go to the gateway 192.168.1.251, ... I have 192.168.1.251 as the router ...
    (microsoft.public.windows.server.networking)
  • Re: VPN & firewalls question
    ... What types of things do your remote clients need to do after they ... If the need access to their WinXP Pro LAN computers, create a VPN and fire ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Routes
    ... succeed with the original requirements because it won't limit LAN access to the ... access to only the Terminal Server by using something like ISA,...once the user ... I will allow full network access to the VPN clients. ... terminate at the servers and no further into the LAN. ...
    (microsoft.public.windows.server.networking)