Tag Info

Hot answers tagged

2

This is not an answer to the question, but to the sub-question "How do I restore remote access to a virtual machine where I've disabled TLS 1.0 and with no physical access?". I disabled TLS 1.0 using IISCrypto, which gave a useful warning about the side effect that RDP will stop working if it is set to TLS. So I checked in: Admin Tools\Remote Desktop ...


2

I have been looking into this for a couple of days now as we to have to comply with PCI-DSS 3.1 which requires TLS 1.0 to be disabled. We also do not want to fall back to RDP Security Layer which is a major security concern. I have finally managed to find some documentation that confirms that TLS 1.1 and TLS 1.2 ARE supported by RDP. This documentation is ...


2

You will need to install RDP 8.0 on your Windows 7 computers and Windows Server 2008 R2 servers, and then enable RDP 8.0 on the local computer policy or group policy. Here is the Microsoft KB for the RDP 8.0. https://support.microsoft.com/en-us/kb/2592687 Once this is done you should be able to disable TLS 1.0 on the computers and servers by editing the ...


1

if the RDP port is changed to a non-standard port, it is very likely that these people will simply iterate ports until they locate the re-assigned RDP port and then continue to try to brute force the password? - Yes, that's likely to happen. My fear of the unknown is that to change the port it would be done by me via Remote Desktop Connection; is it safe? - ...


1

There is little risk in losing access to the server by changing the RDP port, but there is still some. Before changing the RDP port, check any firewalls the server is behind and make sure the new port is not blocked. Also, make sure you can get console access if needed (remote hands, a friend that has access to the server, a remote IP KVM, whatever). This ...


1

If you don't want an application to be launched at user login, then take it out of the Startup folder.



Only top voted, non community-wiki answers of a minimum length are eligible