Best Practices

  • Install the latest service pack and security updates. Ensure that your terminal server is protected by installing the latest service packs and security updates to protect against any known Terminal Services vulnerabilities.

  • Implement the strongest available form of encryption between the Remote Desktop client and server. Ensure that you enable the implementation of high encryption for Terminal Services to protect data sent both to the terminal server and from the terminal server.

  • Use the Appsec tool or software restriction policies to limit which applications can be executed. Appsec.exe enables you to designate which applications are available to nonadministrators in a Terminal Services session. Users are limited to executing the ...

Get Microsoft® Windows® Security Resource Kit, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.