Threats to Terminal Services

When Terminal Services is installed on a server running Windows 2000 or Windows Server 2003, it allows remote computers to connect to the terminal server and launch a remote Windows desktop. When Terminal Services is installed, nonauthorized users can attempt to connect to the terminal server. If not configured for security, Terminal Services on a server running Windows 2000 or Windows Server 2003 is a security vulnerability. For example, when Terminal Services is installed on a server that runs Windows 2000 or Windows Server 2003, the following vulnerabilities exist:

  • Terminal Services users might be connecting with excess permissions.

  • Firewall security might be bypassed by Internet clients.

  • Users require excess privileges ...

Get Microsoft® Windows® Security Resource Kit, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.