We help IT Professionals succeed at work.

Locking down Terminal Services by IP address

jpb123
jpb123 asked
on
Medium Priority
113 Views
Last Modified: 2010-04-13
Is there a way to check the IP address of a user attempting to connect ot a Terminal Server and verify that he or she is on an approved list?  I would think it would be quite easy but can't remember how to do it.
Comment
Watch Question

Commented:
I would say that if you are simply using Terminal Services, then no.

However, were you to use Metaframe and opt for NFuse, then you could, of course, secure your machines using IIS's directory security options as client's would be connecting to a homepage to which you could ontrol access based on IP address.

Author

Commented:
Metaframe isn't an option unfortunately.  Any other possible solutions?

Commented:
You could install IIS on your Terminal Servers and use the Active X Terminal Services client instead.  Then you could still apply some security via IIS:

http://www.microsoft.com/windows2000/server/evaluation/news/bulletins/tsac.asp

Author

Commented:
We ended up just leaving it is without the IP address secured.  I'm going to request a deletion of this if no one objects.
Since you posted the outcome, refunded 200 points and moving to PAQ at zero.
EE Moderator

Explore More ContentExplore courses, solutions, and other research materials related to this topic.