I have been reading about RDP and Active Directories and I have gathered following understandings that I'm not sure are correct:
- Seems like RDP with Network Level Authentication works only (or most easily) with computers in Active Directory
- Active Directory is a service that runs on a computer making the computer a Domain Controller.
- Since Active Directory runs on a server machine, it can't be used to authenticate login to that same server machine. (chicken-egg problem)
Final understanding, and this is the most important one: If the only way to access the network from outside is through VPN, Network Level Authentication is only really useful in preventing unauthorized access to RDP allowed computers from same LAN network.
Am I understanding things correct? Can I just disable Network Level Authentication in RDP and go with less secure option if my home network is behind VPN and I trust all clients on LAN?