Rmeote Desktop Connection explained very basic please

ok.
I have a router and I guess it will have a firewall and I have windows firewall. That should be it as I dont run an antivirus program.

If we start with the port forwarding and set up RDC can I alter the security afterwards or is there a program that helps me do that. I will mainly be using the connection to read my emails while I am away so it will be best if no one has access to it.

The reason I chose RDC is because I thought microsoft would have not had any loop holes. But there we go. If RDC is not secure what else is out there that is secure?

Thanks

This is the admin screen for my router for port forwarding. But as I mentioned earlier I cannot seem to get it. I need to know what to forward the port to. In other words what to type in each box kind of thing.

http://portforward.com/english/routers/port_forwarding/Netgear/WNR834B/SuperSync.htm

Looking at the screenshots can I type exactly the same as it says or do I have to gather my own number from somewhere. If yes from where?

The default port for RDP is 3389 unless you change it.

So is it secure to go for the default port 3389 or make up my own?

FYI: The Remote Desktop Protocol is secure. The protocol establishes a secure connection to your system BEFORE you see your system's logon screen.

From the following article:
Encryption Levels
High
This level encrypts data sent from the client to the remote computer and from the remote computer to the client by using strong 128-bit encryption. Use this level only if you are sure that your client computer supports 128-bit encryption (for example, if it is running Windows XP Professional). Clients that do not support this level of encryption will not be able to connect.

TechNet explanation of RDP: http://technet.microsoft.com/en-us/library/bb457106.aspx

Version 6.0 of RDP now incorporates secure preauthentication before the link to the remote deskop is made. Make sure your machines are all updated and you will be fine. You will notice that they are using the newest version because you will see a logon screen pop up as soon as you click "Connect" in the client.

You make sure you have all user names on your XP box set with a PASSPHRASE and a solid user name. Then you put your user ID into the Remote Desktop Users group, then port forward 3389 to that machine. Make sure that the IP address of the XP Pro box is static so it never gets lost.

Philip

I suggest keeping the Windows Firewall and defining a port exception that has the router's IP in it for 3389.

Philip

Personally I changed my port numbers for an extra layer of protection. You would need to change
it in two places. The first on the local PC in the registry (be careful) and then in the port forwarding
section. I have 3 PC's at home that I connect to remotely, and in order to do this each one has
to have a unique port number so the router knows where to send them.

Here is a link to learn how to change the port number on you remote machine:
http://support.microsoft.com/kb/187623

It is easy to change

madmx78 Lee Tutor's comment is important. You will have to do this.

Also note that you will need to know your WAN ip address for the remote PC.
Not the private IP address (192.168.x.x for example) that will be used behind your router.

There is a tool called TSHammer that only takes a second to sniff all ports for listenning terminal services. Tools like that eliminate any advantage of changing the listening port.

Philip

To find your WAN  IP address, a very easy thing is to go to this page (on computer A), the host in the Remote Desktop Connection:

http://whatismyip.com/

By the way, here is a very good site complete with screenshots of the configuration steps within Windows XP that you need to go through to set up Remote Desktop Connection:

http://www.dslwebserver.com/main/fr_index.html?/main/sbs-remote-desktop-overview.html

I have my WAN ip address - I am trying to set up a static IP addrss but I am having duffuculty with the Preferred DNS server. On the ipconfig/all screen I am getting DNS Servers as 192.168.1.1 When I enter this in I loose my internet connection. The option to select the DNs server automaticall is grayed out as soon as I select use the following IP address radio button.

What do I do?

I have sussed it out so I am on nmy way.

Here is a summary of where I am at the moment.
Port forwarding done - 3389 (does service name make a difference)
Static IP is set
I have a WAN
I have activated Remote Connection (My compter - properties - remote tab - Allow users to connect remotely to this computer)

Now what???

Not sure about the service name, it might be something unique to your router, but most
likely it doesn;t matter as only the port number should be important.

Are we correct to assume you figured out the static IP address, and it is functional
now? if so good job!

Have you tried making a connection since these changes?

The computer you are trying to connect to will be the WAN ip address, not
the acutal PC name or local ip address you assigned!! You router will sort
out where to send the connection based upon the port number. Then put
in your username and password that is on the remote machine.

Domain is not required unless your are trying to connect to a domain, and
if I follow this thread correctly, you are not running a server or domain at
your office.

Hang in there madmx78 you are very close now!! If the connection doesn't work
at this point it will definitely be a configuration error in the routers settings.

As long as your static IP address setting on the remote machine are set in the
range you configured on the router. Your subnet mask should be 255.255.255.0

Also I believe the Gateway & Primary DNS servers on the remote machine should
be set at 192.168.2.1 not 192.168.1.1, but I could be wrong and what you have
might be fine with your router.