Solved

Windows XP administrator remote acces - how to forbid?

Posted on 2010-08-19
17
436 Views
Last Modified: 2013-12-04
Hi,

I have windows XP, and I run webhosting on it: apache, mysql, hmail server, ftp zilla. Since I am maintaining the servers only from my office I would like to stop all services which allow remote administrator access to the computer. Webhosting servers must not be affected.
QUESTION: what services should I stop?

Thank you.
0
Comment
Question by:jbmd
  • 7
  • 3
  • 3
  • +3
17 Comments
 
LVL 39

Expert Comment

by:Krzysztof Pytko
Comment Utility
Disable Remote Desktop in My Computer -> Remote
Then no one will be able logon remotely.
0
 
LVL 6

Expert Comment

by:robbe
Comment Utility
The best thing you could do is to enable the firewall and only open the ports you need for apache, mail, ftp & mysql. The problem is if they use remote support software they can push it remotly if they have the administrator password. Also possible is to empty all passwords of the administrator accounts. This way remote access is not allowed. Please be aware that physical access to the machine then won't be protected.
0
 
LVL 15

Expert Comment

by:Naser Gabaj
Comment Utility
From the desktop, Right click on my computer, Remote, From Remote Desktop section, UnCheck "Allow users to connect remotely to this Computer"

Good luck,

Naser
0
 
LVL 7

Expert Comment

by:powereds
Comment Utility
I agree with robbe because there are some softwares that allows the administrators to connect to your desktop not just through RDP. One example is DameWare Mini Remote Control software which is a very good software.
0
 

Author Comment

by:jbmd
Comment Utility
ok, is there any service in services which is enabling /disabling remote logon?
0
 

Author Comment

by:jbmd
Comment Utility
My pc has windows XP sp3

and I have: my computer -> open, explore, search, maintain, add network unit or remove network unit, send, remove, copy, create shortcut, cut, rename, properties.

There is no "remote" option.
0
 
LVL 7

Expert Comment

by:powereds
Comment Utility
Right-click My Computer > Properties.
remote.JPG
0
 
LVL 7

Expert Comment

by:powereds
Comment Utility
Right-click My Computer > Properties > Uncheck Remote Desktop.
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 

Author Comment

by:jbmd
Comment Utility
my windows is 2002 version legalized specially for my country, I do not have in properties the same table as powereds shows on picture.
0
 
LVL 7

Expert Comment

by:Dk_guru
Comment Utility
Here is one way:

open the registry using regedt32  (from the run command)
Navigate to "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server"
In the right pane, locate a REG_DWORD value named fDenyTSConnection. Double-click on fDenyTSConnection and change the value data from 0 (Remote Desktop enabled) to 1 (Remote Desktop disabled).



Based on this info:
http://technet.microsoft.com/en-us/library/cc782195%28WS.10%29.aspx
0
 

Author Comment

by:jbmd
Comment Utility
Dk_guru, it says is for Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

I have xp windows from 2002 sp3

0
 
LVL 15

Expert Comment

by:Naser Gabaj
Comment Utility
Greeting jbmd,

>>I do not have in properties the same table as powereds shows on picture.
Can you take a snapshot and post it here to see what's in urs.
0
 
LVL 7

Expert Comment

by:Dk_guru
Comment Utility
But obviously you did not look in the registry.
0
 

Author Comment

by:jbmd
Comment Utility
Naser72, sure, its in my language, muj pocítac = my computer
1.jpg
2.jpg
3.jpg
0
 

Author Comment

by:jbmd
Comment Utility
sorry. "tento pocítac" = my computer
0
 
LVL 15

Accepted Solution

by:
Naser Gabaj earned 500 total points
Comment Utility
As I can see from the snapshot this is not "My Computer Icon"; it's Shortcut.

Go to Control panel "ovládacieho panela" and look for System "systém" and then double click on it, and then click on Remote tab "Dialkový"

Then go the Remote desktop section "Pripojenie k vzdialenej ploche" you will see what I mentioned above

Uncheck the box that says  Allow users to connect remotely to this computer "dovolit používatelom pripojit k tomuto pocítacu"

I used Google translate to translate the English to Slovak.

HTH

Naser
0
 

Author Comment

by:jbmd
Comment Utility
Naser72, I did it. Will people be still able to view websites on this pc?

Also, in this remote desktop I saw user "named", which I do not know who could that be so I erased this account. I am the only one using this pc as admin. I hope it was not a mistake.

PS My pc is / was infected by trojan viruses, netsky and so on.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now