RD Session Host Security settings in Windows Server 2016 (SSL, High encryption, etc.) Gpedit.msc, computer configuration, administrative templates, windows components, remote desktop services, remote desktop session host, security, see various options. “Require use of specific security layer for remote (RDP) connections” – Changing Security Layer to SSL is the recommendation listed in Windows 2016, “Client […]
Category: Windows Server 2016
Update: see more detailed post on how to install the RD Gateway Role on Windows Server 2019/2016 here: http://www.riptidehosting.com/blog/installing-the-remote-desktop-gateway-role-rdgw-on-windows-server-2019/ RD Gateway Role in RDS Using the Remote Desktop Gateway Role (RDGW) provides additional security by forcing RDP traffic over https/port 443 (requires SSL certificate) instead of port 3389. General steps to install the RDGW role on […]
Lockout Policies (based on username attempts, not IP addresses): To lock out an account for a period of time after a number of incorrect login attempts (to create delay with recurring failed logins), you can set up Account Lockout Policies in Windows. It does NOT apply to the Administrator account (so you may want to […]
Limit users who can login via RDP By default, all users in the “Administrators group” have RDP access rights. And, of course, all users in the “Remote Desktop Users group” have RDP access rights too. If you only want some members of the Administrators group to have RDP access, you can adjust this in Local […]
RDP Intrusion Prevention Software (Host based Intrusion Detection/Prevention) – RDP IP blockers (software for brute force protection against Windows RDP based on failed attempts from various IP addresses; some products also have geolocation blocking to block IPs assigned to certain countries.) There are several third-party software products available that will lock out IP addresses after […]
Update: See link here for Setting up the VPN Role on Server 2019- http://www.riptidehosting.com/blog/how-to-install-vpn-server-on-windows-server-2019/ Windows Server 2016 VPN Using a VPN with RDP is more secure because it provides two steps to access your network. You could require clients to connect with a VPN first before being able to RDP to the server. Unless you […]
Advantages to using Riptide Hosting SPLA Microsoft Licenses Most customers use our Microsoft licensing (Windows Server, Office, SQL Server, Remote Desktop Services – RDS) provided under the SPLA program (Service Provider Licensing Agreement) on a monthly basis rather than purchasing their own MS Volume Licenses. (Windows Server CAL licenses are not required with our SPLA […]
Update for Windows Server 2016 – Windows Defender is built-in to Windows Server 2016 and is provided at no charge. If you have Windows Server 2012 R2, we can install MS System Center Endpoint Protection on your server for a nominal monthly fee (Windows Defender does not exist for Windows Server 2012r2). You are always […]
Windows Server comes with Internet Explorer (you are also free to download another browser of your choice such as Chrome or Firefox). Internet Explorer Enhanced Security Configuration (IE ESC) is a security feature that can be enabled or disabled. If enabled, when you open IE you will see something like this “Internet Explorer Enhanced Security […]