Security guidance for remote desktop adoption

As the volume of remote workers quickly increased over the past two to three months, the IT teams in many companies Get Help in Windows 10 scrambled to figure out how their infrastructures and technologies would be able to handle the increase in remote connections How To Get Help in Windows 10 Keyboard . Many companies were forced to enhance their capabilities to allow remote workers access to systems and applications from their homes and other locations feature update to windows 10 version 2004 outside the network perimeter. Companies that couldn’t make changes rapidly enough to increase capacity for remote workers windows 10 version 2004 problems might rely on remote access using the remote desktop protocol, which allows employees to access workstations and systems directly.

Recently, conducted some research on ports that are accessible on the internet, surfacing some important findings. Notably, there has been an increase in the number of systems accessible via the traditional Remote Desktop Protocol (RDP) port and a well-known “alternative” port used for RDP. A surprising finding from John’s research is the ongoing prevalent usage of RDP and its exposure to the internet.

Although Remote Desktop Services (RDS) can be a fast way to enable remote access for employees, there are a number of security challenges that need to be considered before using this as a remote access strategy. One of these challenges is that attackers continue to target the RDP and service, putting corporate networks How To Get Help in Windows 10 Keyboard , systems, and data at risk (e.g., cybercriminals could exploit the protocol to establish a foothold on the network, install ransomware on systems, or take other malicious actions). In addition, there are challenges with being able to configure security for RDP sufficiently, to restrict a cybercriminal from moving laterally and compromising data.

Security considerations for remote desktop include:

• Direct accessibility of systems Get Help in Windows 10 on the public internet.
• Vulnerability and patch management of exposed windows 10 version 2004 problems systems.
• Internal lateral movement after initial compromise.
• Multi-factor authentication (MFA).
• Session security.
• Controlling, auditing, and feature update to windows 10 version 2004 logging remote access.

Some of these considerations can be addressed using Microsoft Remote Desktop Services to act as a gateway to grant access to remote desktop systems. The Microsoft Remote Desktop Services gateway uses Secure Sockets Layer (SSL) to encrypt communications and prevents the system hosting the remote desktop protocol services How To Get Help in Windows 10 Keyboard  from being directly exposed to the public internet.

Identify RDP use

To identify whether your company is using the Remote Desktop Protocol, you may perform an audit and review of firewall policies and scan internet-exposed Get Help in Windows 10 address ranges and cloud services windows 10 version 2004 problems you use, to uncover any exposed systems. Firewall rules may be labeled as “Remote Desktop” or “Terminal Services.” The default port for Remote Desktop Services is TCP 3389, but sometimes an alternate port of TCP 3388 might be used if the default configuration has been changed.

Use this guidance to help secure Remote Desktop Services

Remote Desktop Services can be used for session-based feature update to windows 10 version 2004 virtualization, virtual desktop infrastructure (VDI), or a combination of these two services. Microsoft RDS can be used to help secure on-premises deployments, cloud deployments, and remote services from various Microsoft partners (e.g., Citrix). Leveraging RDS to connect to on-premises systems enhances security by reducing the exposure of systems directly to the internet. Further guidance on establishing Microsoft RDS can be found in our Remote destop services.

On-premises deployments may still have to consider performance How To Get Help in Windows 10 Keyboard  and service accessibility feature update to windows 10 version 2004 depending Get Help in Windows 10 on internet connectivity provided windows 10 version 2004 problems through the corporate internet connection, as well as the management and maintenance of systems that remain within the physical network.

Leverage Windows Virtual Desktop

Virtual desktop experiences can be enhanced using Windows Virtual Desktop, delivered on Azure. Establishing an environment in Azure simplifies management and offers the ability to scale the virtual desktop and application virtualization services through cloud computing. Leveraging Windows Virtual Desktop foregoes the performance issues associated with on-premises network connections and takes advantage of built-in security and compliance capabilities provided by Azure.

To get more information about setting up, go to our Windows Virtual Destop Product Page

Microsoft documentation on Windows Virtual Desktop offers a tutorial how to guideon enabling your Azure tenant for Windows Virtual Desktop windows 10 version 2004 problems and connecting How To Get Help in Windows 10 Keyboard  to the virtual desktop environment securely, once it is established.

Secure remote administrator access

Remote Desktop Services are being used not only by employees for remote access, but also by many system developers and administrators to manage cloud and on-premises systems and applications. Allowing administrative access of server Get Help in Windows 10 and cloud systems directly through RDP elevates the risk because the accounts used for these purposes usually have higher levels of access across systems and environments, including system administrator access. Microsoft Azure helps system administrators feature update to windows 10 version 2004 to securely access How To Get Help in Windows 10 Keyboard  systems using Network Security Groups and Azure Policies. Azure Security Center further enhances secure remote administration of cloud services by allowing “just in time” (JIT) access for administrators.