I'd need to make Terminal Services available over the web, what is the best (secure) way for me to do this?

Thanks S

link|improve this question

75% accept rate
feedback

3 Answers

up vote 3 down vote accepted

First, I'd employ a secured connection such as a VPN of some sort (OpenVPN, PPTP, Cisco, ssh-tunneling, etc).

As long as you're running RDP v6 or higher, the connection is encrypted - but authentication may not be (if I understand the documentation properly).

link|improve this answer
It is as encrypted as the connection, but not more so. – Satanicpuppy Nov 1 '09 at 21:35
before v6 it was completely unencrypted (en.wikipedia.org/wiki/Remote_Desktop_Protocol). With v6, I do not know if you can turn it off. – warren Nov 2 '09 at 4:59
There is also a significant man-in-the-middle attack vector, which is why additional security is reccomended. – Roy Nov 2 '09 at 10:47
that was addressed with the update to v6, from my understanding – warren Nov 2 '09 at 11:22
feedback

Look into the Remote Desktop Gateway service (present in Windows 2008 and higher) - it will tunnel RDP traffic inside a SSL stream, abstracting the terminal server from the client. Much the same way that Citrix Secure Gateway did.

link|improve this answer
feedback

Citrix Access Gateway or a simple ssh tunnel

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.