Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I would like to know what people think about installing the Desktop Experience feature for a production server? I have an application which requires the web client component for one of its features to work.

Can I install this and still use rdp and have a high level of security etc Thanks

share|improve this question

1 Answer 1

up vote 4 down vote accepted

If you have valid reasons for it, there is nothing wrong with it running on a server. It's disabled by default to prevent unnecessary ram/cpu from being used just for admin tasks, but if you need it, I've not seen a noticeable adverse affect from enabling it. Can't imagine a security risk of enabling it other then the general "less code running = lower attack surface". It doesn't open any new ports that I know of.

share|improve this answer
    
Windows Media Player would be the security risk that I'll point out (with its overly helpful UPnP sharing, there's probably some additional network attack surface), but just the same; if you need it, you need it (audio codecs are another common need, which is why it's needed for Exchange's Unified Messaging server role). –  Shane Madden May 17 '11 at 21:40
    
Agreed. From a security perspective, the point is, don't run anything you don't have to. Or put another way, make intentional decisions about everything you run. There is nothing inherently insecure about it, so if you need it, run it. BTW, if search is enabled by loading this, you may want to consider whether you need that (performance) –  uSlackr May 17 '11 at 21:43
    
Good point on WMP Shane. Probably worth someone doing a services and port diff after enabling Desktop Experience just so we're all sure. –  Bret Fisher May 22 '11 at 21:47

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.