Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am configuring a Windows web server on a remote host. Obviously I need to use terminal services, but what can I do to make it as secure as possible. The Hosting company also needs access to the server when there are issues and so I need to provide access to them as well.

1-What can I do in general to minimize chances of unauthorized access.

2-How should I handle the permissions for the hosting company's access? Should user "admin" not be used?

share|improve this question

2 Answers 2

  1. My recommendation would be to put it behind a firewall with VPN access.

  2. As a best practice "admin" "root" or "administrator" shouldn't be used over any external connection that isn't properly encrypted

share|improve this answer

1 - Put it behind a VPN or if someone has SSH access to a box on the local network that is trusted, setup a simple SSH tunnel so that RDP can be accessed through the tunnel. Either option means you won't be passing any credentials in the open, and that's a good thing.

2 - Don't give them administrative access if they don't need it. Give them a degraded user login (without administrative privileges) if at all possible.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.