Windows Server® 2008 R2 Remote Desktop Services Resource Kit

Chapter 8. Securing Remote Desktop Protocol Connections

• Core Security Technologies

• Using RDP Encryption

• Authenticating Server Identity (Server Authentication)

• Authenticating Client Identity with Network Level Authentication (NLA)

• Configuring the Security Settings on the RD Session Host Server

Chapter 7, discussed some approaches to locking down the server or VM to protect them from malice or error. Isn’t that enough?

Locking down the server is important, but it assumes that you’ve already made a secure connection to the server. That assumption doesn’t consider the possibility of the connection—or the communication between the client and server—being compromised in some way. For example

• An existing connection could be intercepted and the data flow compromised. ...