How to correclty deploy a terminal server in a DMZ (lockdown)

Posted on 2007-10-02
Last Modified: 2013-11-21
I am planning to deploy a windows 2003 Terminal server in a DMZ. What utilities are availabel to make sure server is as locked as possible. Server will be used by remote suer to access email on an internal exchange server. Office 2003 will be isntall on the server. Right the server will be in a workgroup.
Question by:escadmin
    LVL 8

    Accepted Solution

    You don't need utilities.
    You only have to allow pass exchange tcp port http (rpc over http) from DMZ server to LAN Exchange
    Configure exchange and outlook to work with RPC over http and all is done!
    LVL 63

    Assisted Solution

    IN addition, check the MS info on locking down Internet servers.

    This includes shutting down/ or removing all unrequired services and tasks, as well as proper auditing, and firewall setup.

    I hope this helps !

    Author Comment

    Done all of the above and but wanted to see if there was something more specific for TS in a DMZ.
    LVL 1

    Expert Comment

    Forced accept.

    EE Admin

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Why spend so long doing email signature updates?

    Do you spend loads of your time carrying out email signature updates? Not very interesting are they? Don’t let signature updates get you down. Let Exclaimer Cloud - Signatures for Office 365 make managing email signatures a breeze.

    Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
    On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    6 Experts available now in Live!

    Get 1:1 Help Now