up vote 1 down vote favorite
share [g+] share [fb]

I'm following this page on security tips for RDP (for my online server):

http://www.mobydisk.com/techres/securing_remote_desktop.html

Now I don't have a special user account for RDP access. Just the administrator can log on. However, I want to make sure that someone can't brute force the password.

I've set the 'account lockout policy' to 3 attempts and a retry after 3 minutes. However, when I connect back with RDP I can still try 5 times before RDP breaks the connection. I can then immediately reconnect and try 5 more times.

Any ideas if there is a lockout policy which also holds true fro the admin?

link|improve this question
Many people handle this by simpling renaming the Administrator account. Yes it is a bit of obscurity-based-security, but it may help a little. After you rename you could create a un-privileged account with the name administrator. – Zoredache Feb 23 '11 at 16:28
ok..so I create a new user and give admin rights and configure a proper lockout, and the real admin I just rename into something weird so it can't be guessed? – reinier Feb 25 '11 at 13:29
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.