Re: Terminal Services

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Jonathan Maltz [MS-MVP] (jmaltz_at_mvps.org)
Date: 03/11/04 

Date: Wed, 10 Mar 2004 22:36:56 -0500

Hi Travis,

No, since they are encrypted. However, TS brute force password crackers
exist, so you would want to restrict TS to the local network only, and VPN
into the network first to avoid someone running a brute force attack to
figure out usernames and passwords 

-- 
--Jonathan Maltz [Microsoft MVP - Windows Server, Virtual PC]
http://www.visualwin.com - A Windows Server 2003 visual, step-by-step
tutorial site :-)
http://vpc.visualwin.com - Does <insert OS name> work on VPC 2004?  Find out
here
Only reply by newsgroup.  I do not do technical support via email.  Any
emails I have not authorized are deleted before I see them.
"Travis" <anonymous@discussions.microsoft.com> wrote in message
news:9b3c01c40605$eb6b2fd0$a401280a@phx.gbl...
> If I have a firewall and I want to open the port to allow
> clients to access the server via Terminal Services and I
> give them my external IP Address to connect via Remote
> Desktop, would this be secure?  Wouldn't the windows
> security (usernames and passwords) be vunerable to packet
> sniffers, etc?  TIA

Relevant Pages

  • Re: Security issues in publishing content of /etc ?
    ... >> You could use a brute force attack to get weak passwords. ... >> software installed in the machine or other hosts information. ... a user, with your mimic software installed on his machine, wont be able to ...
    (Security-Basics)
  • Re: Creating a Password
    ... The devil is always in the details with security. ... > Whether it's a 'dictionary' or 'brute force' attack, ... > I will also agree that we're nit-picking the sentence "Such passwords can ... > only be cracked by means of brute force". ...
    (alt.computer.security)
  • Re: Creating a Password
    ... The devil is always in the details with security. ... > Whether it's a 'dictionary' or 'brute force' attack, ... > I will also agree that we're nit-picking the sentence "Such passwords can ... > only be cracked by means of brute force". ...
    (microsoft.public.security)
  • Re: Creating a Password
    ... Whether it's a 'dictionary' or 'brute force' attack, ... describes a methodology. ... "Such passwords are less apt to be cracked by means of a dictionary attack." ...
    (microsoft.public.security)
  • Re: Creating a Password
    ... Whether it's a 'dictionary' or 'brute force' attack, ... describes a methodology. ... "Such passwords are less apt to be cracked by means of a dictionary attack." ...
    (alt.computer.security)