Click here to get back home

SSL and Remote Desktop

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
SSL and Remote Desktop Sam Ramsey 02-27-2008
Posted by Brian Komar \(MVP\) on February 29, 2008, 9:30 am
Please log in for more thread options
Event more simple
Either limit which group can use Remote Desktop to connect
or limit which group can Log in Locally
Brian

> It sounds to me Sam like you want to enable the server for SSL,
> and, you also want to sneaker-net distro certs for IPsec rule use.
> You should look into doing each separately, as they are diff.
>
>>I want to secure it to limited users/computers. I wanted to create a SSL
>> certificate and only be able to manually pass out that certificate.
>>
>> With Microsoft CA certificate, it didnt limit the user/computers.
>>
>> Sam
>>
>> "Brian Komar (MVP)" wrote:
>>
>>> How would a 3rd party cert solve your problem. The certificate encrypts
>>> the
>>> connection, it does not limit logons no matter whether the cert is
>>> issued by
>>> a private CA or a commercial CA
>>> Brian
>>>
>>> > How do I add a thrid party SSL certicate to remote desktop?
>>> >
>>> > I read all the documentation I can find about SSL and Remote Desktop
>>> > and
>>> > the
>>> > ones I find want me to use Microsoft CA Services. I tried that,
>>> > however it
>>> > doesn't force only certain system to login. Any systems can login.
>>> > Even
>>> > though I can create a SSL Remote Desktop connection.
>>> >
>>> > I think it would be better if I went with a third party certifacte.
>>> >
>>> > Thanks,
>>> >
>>> > Sam
>>>
>>>
>
>


Posted by Roger Abell [MVP] on March 3, 2008, 8:49 am
Please log in for more thread options
Yes, indeed.
He seemed most interested in getting the traffic stream encrypted.

Roger

> Event more simple
> Either limit which group can use Remote Desktop to connect
> or limit which group can Log in Locally
> Brian
>
>> It sounds to me Sam like you want to enable the server for SSL,
>> and, you also want to sneaker-net distro certs for IPsec rule use.
>> You should look into doing each separately, as they are diff.
>>
>>>I want to secure it to limited users/computers. I wanted to create a SSL
>>> certificate and only be able to manually pass out that certificate.
>>>
>>> With Microsoft CA certificate, it didnt limit the user/computers.
>>>
>>> Sam
>>>
>>> "Brian Komar (MVP)" wrote:
>>>
>>>> How would a 3rd party cert solve your problem. The certificate encrypts
>>>> the
>>>> connection, it does not limit logons no matter whether the cert is
>>>> issued by
>>>> a private CA or a commercial CA
>>>> Brian
>>>>
>>>> > How do I add a thrid party SSL certicate to remote desktop?
>>>> >
>>>> > I read all the documentation I can find about SSL and Remote Desktop
>>>> > and
>>>> > the
>>>> > ones I find want me to use Microsoft CA Services. I tried that,
>>>> > however it
>>>> > doesn't force only certain system to login. Any systems can login.
>>>> > Even
>>>> > though I can create a SSL Remote Desktop connection.
>>>> >
>>>> > I think it would be better if I went with a third party certifacte.
>>>> >
>>>> > Thanks,
>>>> >
>>>> > Sam
>>>>
>>>>
>>
>>
>



Posted by Roger Abell [MVP] on February 28, 2008, 12:19 am
Please log in for more thread options
What are you trying to do Sam, SSL encrypt RDP traffic
or control what origin machines people can use to open
up an RDP session with the machine, or both?
They are two entirely separate things to configure.

> How do I add a thrid party SSL certicate to remote desktop?
>
> I read all the documentation I can find about SSL and Remote Desktop and
> the
> ones I find want me to use Microsoft CA Services. I tried that, however it
> doesn't force only certain system to login. Any systems can login. Even
> though I can create a SSL Remote Desktop connection.
>
> I think it would be better if I went with a third party certifacte.
>
> Thanks,
>
> Sam



Similar ThreadsPosted
Remote desktop February 21, 2006, 3:25 pm
Can connect via Remote Desktop September 26, 2005, 12:36 pm
remote desktop security February 18, 2006, 5:38 pm
Windows Remote Desktop April 16, 2006, 7:17 am
Secure Remote Desktop August 10, 2006, 11:00 pm
RDP: remote desktop issues September 23, 2007, 3:13 pm
Remote Desktop Protocol October 29, 2007, 5:16 pm
How secure is remote desktop June 16, 2008, 8:46 pm
Remote Desktop MITM Concerns June 10, 2005, 8:45 am
Securing Remote Desktop To Server August 11, 2005, 10:30 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap