Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What are relevant Windows Policies to secure access from the Internet to Remote Desktop?

I'm thinking about things like failed login attempts and similar.

share|improve this question

I'm not aware of anything to restrict based on where the RDP client is connecting from (either based on range or zone), but you could simply not forward port 3389 into any of your machines.

As far as failed login attempts, I believe that the only way to handle that is via your regular account security policies. Set a number of failed accounts, lockout period, and reset time (if any).

share|improve this answer

My answer to This ServerFault question may be of use regarding the settings.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.