Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am configuring a Windows web server on a remote host. Obviously I need to use terminal services, but what can I do to make it as secure as possible. The Hosting company also needs access to the server when there are issues and so I need to provide access to them as well.

1-What can I do in general to minimize chances of unauthorized access.

2-How should I handle the permissions for the hosting company's access? Should user "admin" not be used?

share|improve this question

1 - Put it behind a VPN or if someone has SSH access to a box on the local network that is trusted, setup a simple SSH tunnel so that RDP can be accessed through the tunnel. Either option means you won't be passing any credentials in the open, and that's a good thing.

2 - Don't give them administrative access if they don't need it. Give them a degraded user login (without administrative privileges) if at all possible.

share|improve this answer
  1. My recommendation would be to put it behind a firewall with VPN access.

  2. As a best practice "admin" "root" or "administrator" shouldn't be used over any external connection that isn't properly encrypted

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.