Re: Any Way to Specific Which Local Drives RDP Can Access?



"Patrick Rouse" <PatrickRouse@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:69440D27-0F21-4918-BD43-2438919CDF2E@xxxxxxxxxxxxxxxx
Maybe I'm completely dense, but where is the security flaw?

A trojan commonly looks for any and all EXEs to attach its bootstrap code
to. If said virus is active on the remote system you connect to, and now
suddenly your c: drive gets mapped on the remove system as f:, the trojan
can start to explore the f: drive and start modifying files there.

What I would like to do is to have a drive reserved for data exchange with
nothing of much interest on it, and expose that drive to the remote system I
connect to. Now I can upload specific files via that shared drive, and
download via the shared drive, without exposing my entire system volume.

--
Will



.