win2k3 ent with sp2 : configure terminal server to use TLS for server authentication is not work!!

Posted by Jiaqi Li on June 2, 2009, 7:56 am

Please log in for more thread options

Dear all,

I just finished a new install of a windows server 2003 ent with sp2,
and followed the kb895433 to configure my win2k3 server to use TLS for
remote desktop access. But when I finished the configure I found I can
still access the win2k3 server via remote desktop and no CA
certificate is needed.

so what's wrong with my server or myself?

-Jiaqi

Posted by Anthony [MVP] on June 2, 2009, 4:32 pm

Please log in for more thread options

Jiaqi,
What do you see, and what were you expecting to see, when you connect to the
server?
Anthony
http://www.airdesk.com

show/hide quoted text

Posted by Jiaqi Li on June 2, 2009, 8:11 pm

Please log in for more thread options

Anthony,

I want to protect my windows 2003 remote desktop access via SSL so
configure all thins followed kb895433 and the windows server 2003 ent
with sp2 is a new installation. When I finished everything, I use
remote desktop client to visit the windows 2003 server from a windows
xp pro sp3 without install the server's certificate, and I found
everything is not change, I still can visit the remote desktop and
nothing is different. As I know, if SSL is enable, the remote desktop
float bar will show a SSL lock icon but i found nothing except a float
icon.

show/hide quoted text
the
show/hide quoted text

Posted by Anthony [MVP] on June 3, 2009, 3:52 am

Please log in for more thread options

Jiaqi,
Just assuming for a moment that everything is set up correctly, what happens
if you change the Advanced option in the client to "Do not connect if
authentication fails"?
Anthony
http://www.airdesk.com

show/hide quoted text

Posted by Jiaqi Li on June 3, 2009, 5:48 am

Please log in for more thread options

when I changed the security option to "no authentication" in the
remote desktop client, the remote desktop client said "the remote
computer requires authentication for you to connect. verify the
authentication settings and try again"

And when I changed it to "attempt authentication" and " require
authentication", it's both show a security alert for my win2k3's
certificate information.

Now I sure my remote desktop access is enabled SSL, and everything is
ok.

and if I can control the server's SSL certificate and just install it
on the desktop pc which I allow to visit my server via remote
desktop ?

show/hide quoted text
ens
show/hide quoted text
p
show/hide quoted text
to
show/hide quoted text
..
show/hide quoted text
or
show/hide quoted text
an
show/hide quoted text