asked on

How to secure remote desktop from screen capture or other data retrieval

I'm wondering if it's possible to secure a terminal server to keep the connected user from being able to take screenshots or use other methods of visually recording or printing data. We are trying to keep strict control of the content viewed in a particular application and are researching different methods of securing that information.

One thought was to find a way to force the remote desktop connection to stay in full screen and disable any clipboard transfer and devices. Is this possible with Windows Server 2003 or 2008?

ASKER CERTIFIED SOLUTION

dacselat

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

techoutfit

ASKER

I've noticed that you can disable this on the server side too. That helps some but it seems just as easy for someone to restore the window (so it's not fullscreen anymore) and take a screen capture that way. Any way we can avoid this?

Gunter17

Do you have control of the remote workstations? Are they casual workstations running just this app when necessary, or dedicated PCs?

techoutfit

ASKER

We are a third party providing the server, not necessarily the workstations. We could provide/require third-party software to connect to our server if it would accomplish our goal.

SOLUTION

Gunter17

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

techoutfit

ASKER

Go ahead and split the points. What it came down to is it needed to be approached from a policy standpoint, not a technical standpoint. Since we cannot control the physical aspects of end users, it would be an unwinnable battle to try to block every method of copying data. No matter what we do, a user could (at worst) take a picture of the screen with a camera.

Thanks for all of the feedback.