A remote desktop, which is also known as terminal services for administration, is basically a Windows service that allows users to connect to a host computer from a different location. However, before you can use a remote desktop, it is very essential to create a secure connection so as to avoid any kind of security issues.
Since remote desktop is not enabled by default, you must particularly enable it to allow remote access to the workstation. As soon as it is enabled, any member of the administrator’s group can connect to the workstation. Likewise, other members whom you want to give access to must be placed on a remote access list.
The following are important steps that you must follow to configure remote access:
-
Go to the Control Panel, click on System and Security and then click System.
-
Click Remote Settings in the left pane of the System page. This opens the System Properties dialog box to the remote tab.
-
In order to disable remote desktop, select don’t allow connection to this computer and click OK.
-
If you want to enable the remote desktop, there are mainly two options:
-
To allow connections from any version of Windows, select allow connections from computers running any version of remote desktop.
- To allow connections from Windows 7 or later computers, select allow connections only from computers running remote desktop software with network level authentication.
-
-
Click select users that displays the remote desktop users dialog box and then click Add to grant remote desktop access to a user.
-
If you want to revoke remote access permission for a user account, just select the account and then click Remove.
-
When you have completed, click OK two twice.
Below are some of the tips to make a secure remote desktop connection:
-
Limit users who can log on to the host computer: In order to have a secure connection, you must limit the number of users that can access your computer. For this, you have to go to the host computer’s System Properties and choose the Remote tab. If remote desktop is installed, the box that indicates, Allow users to connect remotely should be checked. If not, check it now. After this, click the Select Remote User’s button and add the group of users that can have access to the computer.
-
Set the number of password attempts until the user is locked out: Go to the Local Security section and chose the Account Lockout Policy folder. This folder has mainly three settings that can be changed. These settings are:
-
Account Lockout Duration
-
Account Lockout Threshold
-
Reset Account Locked After
-
The account Lockout Duration is the amount of times that a person can enter the wrong password before being locked out. The other two settings allows you to set how long a user will be locked out from the system after passing the number in the account lockout threshold section. Make the changes that you feel are the most appropriate for your system.
- Allow only certain IP addresses to access the Remote Desktop: An IP address or Internet Protocol address is a unique series of numbers that distinguishes a computer. Moreover, an internet protocol is basically a set of rules that preside over internet activity and aid completion of an assortment of actions on the World Wide Web. It is a technology that allows one computer to communicate with another through the Internet. Through Windows, it is possible to limit the remote desktop connection to only known and trusted IP addresses.
The above are some of the most important and correct ways of enabling and securing remote desktop connection. You will do well to bookmark this page.
Nil Mathew, a blogger and an online SAP training provider is keen to share this blog to his frequent readers who are keen to know the success rate if the remote desktop software is integrated as an add-on to training.