[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 416
  • Last Modified:

Securing Remote desktop

I want to let prospective companies look at an application server inside our network, but restrict them from downloading or removing any of the code. Programmers generally know how to get around restrictions. The server is 2003 Standard edition, and I've created a user that is only a member of remote desktop users. I've also prevented local drive mapping and clipboard via Terminal Service Configuration.

What about ftp via browser or command line?

What other methods would a person use?

What else should i be doing?
0
zen_68
Asked:
zen_68
  • 2
1 Solution
 
simonseztechCommented:
You have a few options here.

Here 2 options that I know will work.
You can install 2X Application Server (http://www.2x.com/applicationserver/) that let other only remote the application (not the whole desktop). They have a free version up to 5 connection.

You can also check ThinApp (from VMware) it's an application streaming technologie (http://www.vmware.com/products/thinapp/).
0
 
simonseztechCommented:
You can also "lockdown" your windows 2003 remote desktop via group policy (http://support.microsoft.com/kb/278295)
0
 
Cláudio RodriguesCommented:
Well they can for example print stuff. So you should disable that.
The reality is they can always do PRINT SCREEN if they really want to steal information. Cumbersome, yes, it is. But can be done.

Cláudio Rodrigues
Microsoft MVP - Remote Desktop Services
Citrix CTP
0
 
zen_68Author Commented:
hmmmm...looking for a bit deeper info.
0

Featured Post

Vote for the Most Valuable Expert

It’s time to recognize experts that go above and beyond with helpful solutions and engagement on site. Choose from the top experts in the Hall of Fame or on the right rail of your favorite topic page. Look for the blue “Nominate” button on their profile to vote.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now