Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

If a RDP client is overrun with viruses and trojans is there any risk to the Terminal server? Printers are the only local resource that is shared. Connection to the server is through a Gateway. User authentication is assured (Through something like phonefactor).

share|improve this question
add comment

3 Answers

up vote 3 down vote accepted

You should be good, if you're connecting strictly via RDP. The only thing that might get you is if something weird was configured to run when the connection is established. For example, if you are using the built-in Windows RDP client then you can set a program to run when the connection is made. In the off-chance that you have something detrimental to the server set up there then something bad could happen I suppose. That's somewhat of a longshot, though, I'd think.

You might also get something funky if you set the clipboard to share with local resources. And for sure don't bring local drives to the party (following Stephen Thompson's answer on file-sharing).

share|improve this answer
add comment

My concern would be that on an infected client someone would use a keyboard logger or something and collect the credentials and server information that was used to establish the RDP session. If a system has malware, then having a keylogger installed is a real possibility.

share|improve this answer
    
+1 that's a good point. –  squillman Feb 23 '10 at 1:00
    
Good point and all too easily overlooked. –  John Gardeniers Feb 23 '10 at 1:10
add comment

If you have File Sharing turned on, yes it's possible for virus to upload themselves to the terminal service

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.