<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0" xmlns:s="http://www.techrepublic.com/search" xmlns:dc="http://purl.org/dc/elements/1.1/"  xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
    <title><![CDATA[Questions & Answers: windows server 2003 remote desktop ]]></title>
    <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop]]></link>
    <atom:link rel="hub" type="application/rss+xml" href="http://pubsubhubbub.appspot.com/" />
    <atom:link rel="self" type="application/rss+xml" href="http://www.techrepublic.com/forum/questions/101-393052/rss" />

    <description><![CDATA[]]></description>
    <language>en-us</language>
    <lastBuildDate>2013-05-20T07:34:06-07:00</lastBuildDate>
             

    <item>
        <title><![CDATA[update]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3684290]]></link>
        <description><![CDATA[i have set up an external monitor setup  to find out where the issue is. i have changed the ports for rdp, hopefully i will find out where  the problem is.i will post update once i have enough information.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3684290]]></guid>
        <dc:creator><![CDATA[xcabal12]]></dc:creator>
        <pubDate>Wed, 11 Jul 2012 16:59:23 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3683351]]></link>
        <description><![CDATA[Indeed, there are brute force hacking tools like Tsgrinder and tscrack that can cause exactly the symptoms you describe. Since it does not log more than three failed connection attempts, tsgrinder attempts two connections, then resets, two again, then resets. Tsgrinder brute forces the administrator account, since it cannot be locked out for local logons. The TS logon process uses an encrypted channel so it cannot typically be spotted by an IDS system. I would bet if you logged the IPs of inbound connection attempts you will see LOTS of attempts per second. If nothing else, use some port other than 3389. Security through obscurity is better than no security]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3683351]]></guid>
        <dc:creator><![CDATA[robo_dev]]></dc:creator>
        <pubDate>Mon, 09 Jul 2012 09:03:35 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Good suggestions...]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3683244]]></link>
        <description><![CDATA[Everyone who has replied have left some good basic suggestions to check out.Since it sounds as if you have the RDP port open in your firewall, I would close that port immediately and put up some sort of VPN.  As mentioned, the Microsoft RAS/PPTP is easy and can be setup fairly quickly.Even if this doesn't clear up the problem, you would have at least secured, IMHO, a major security hole!  What is this server's role?  In other words why do people RDP to it?  Knowing the role of the server may help us isolate the problem even more.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3683244]]></guid>
        <dc:creator><![CDATA[Rob Kuhn]]></dc:creator>
        <pubDate>Mon, 09 Jul 2012 07:48:37 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3683140]]></link>
        <description><![CDATA[i will try that Monday and i will run a virus scan on all the computers as well, i have already started the routers monitoring as well as packet capture so hopefully i will be able to resolve this issue]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3683140]]></guid>
        <dc:creator><![CDATA[xcabal12]]></dc:creator>
        <pubDate>Sun, 08 Jul 2012 18:57:52 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3683116]]></link>
        <description><![CDATA[it already on the lowest settings, and it happen mostly after everyone leaves work, but at different times]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3683116]]></guid>
        <dc:creator><![CDATA[xcabal12]]></dc:creator>
        <pubDate>Sun, 08 Jul 2012 18:55:36 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Monitor ports]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3683113]]></link>
        <description><![CDATA[Have you tried netstat or http://www.nirsoft.net/utils/cports.html to show ports in use? Also not sure what firewall you have or if you have access to it, but if your firewall has software to monitor like Cisco asdm, you could use that with both inside and outside addresses for the server and see if there is a DOS or something else going on.  Maybe it's a virus or malware going out.  I know you mentioned logs before, so if you were referring to the firewall, I apologize for the repetition.  The real time GUI can be a big help.  If nothing else you can rule out traffic from the outside, and you can let it run for a while to capture what's going on before the crash, so to speak.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3683113]]></guid>
        <dc:creator><![CDATA[gdeangelis@...]]></dc:creator>
        <pubDate>Sun, 08 Jul 2012 17:52:46 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Remote Desktop Connection Configuration]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682954]]></link>
        <description><![CDATA[Have you tried adjusting the connection settings on the Remote Desktop software itself before connecting?  You may want to at least adjust it to something other than a LAN Connection to save in the network draw.Also, is this happening around the same time or does it vary?]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682954]]></guid>
        <dc:creator><![CDATA[supm1ke@...]]></dc:creator>
        <pubDate>Sat, 07 Jul 2012 19:49:53 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682852]]></link>
        <description><![CDATA[nothing in the console that shouldnt be there, getting off the network is going to be tricky to say the least, nothing be in reported at boot.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682852]]></guid>
        <dc:creator><![CDATA[xcabal12]]></dc:creator>
        <pubDate>Sat, 07 Jul 2012 05:44:52 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Thought]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682758]]></link>
        <description><![CDATA[Have you logged in from the console and examined CPU and running tasks?  Any new software, or changes recently ?  I'd look at getting it off the network entirely for the same amount of time it would take to have issues normally, then access it from a laptop and a crossover cable.  Like Rob mentioned above, you can at least isolate the problem.  A good scan might turn up some goodies too!  Anyone leaving term sessions up and running?  This can chew up CPU.  Also, when you boot the server, do you see any errors reported in post like CPU or memory?  Maybe a fan failure?]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682758]]></guid>
        <dc:creator><![CDATA[gdeangelis@...]]></dc:creator>
        <pubDate>Fri, 06 Jul 2012 19:08:48 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682741]]></link>
        <description><![CDATA[im will look into getting  the public ip change and setting up a vpn, the logs dont show anything like A DoS going on]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682741]]></guid>
        <dc:creator><![CDATA[xcabal12]]></dc:creator>
        <pubDate>Fri, 06 Jul 2012 14:56:58 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Hm.]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682717]]></link>
        <description><![CDATA[It almost sounds like you're suffering from a DoS attack (Denial-of-Service).  I don't know how easy or hard it is for you to do but one thing you can try is changing the public IP address and see how it goes.  If you go that route, I might suggest you change the internal IP address too just in case the DoS attacks are actually coming from the inside of your firewall.But before you go through that aforementioned hassles, when connecting from the outside, do you have to establish a VPN connection first?  Or do you just have the port open?  If the later I would *strongly* suggest you close that port and put in a VPN connection.  Even if it's just the Microsoft RAS/PPTP (it's real easy to setup and you can secure it).]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682717]]></guid>
        <dc:creator><![CDATA[Rob Kuhn]]></dc:creator>
        <pubDate>Fri, 06 Jul 2012 13:37:23 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682715]]></link>
        <description><![CDATA[i made sure there is nothing running for the past month during the night hours but it still happens, i also did a port scan from the outside using nmap which showed that it started blocking all the ports but nothing is set in the router/firewall to block them at anytime]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682715]]></guid>
        <dc:creator><![CDATA[xcabal12]]></dc:creator>
        <pubDate>Fri, 06 Jul 2012 13:08:25 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[At night?]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682711]]></link>
        <description><![CDATA[Do you have anything happening on that server at night?  Virus scans, defrag job, backup job or some other scheduled task?  Something that could perhaps not only be causing the server to bog down and/or perhaps cause a memory leak?Is there anything running in the background?]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682711]]></guid>
        <dc:creator><![CDATA[Rob Kuhn]]></dc:creator>
        <pubDate>Fri, 06 Jul 2012 12:34:00 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682662]]></link>
        <description><![CDATA[I cant say, the problem starts when nobody is around mostly happening at night. the next day nobody has any issues]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682662]]></guid>
        <dc:creator><![CDATA[xcabal12]]></dc:creator>
        <pubDate>Fri, 06 Jul 2012 10:07:02 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[what about from the LAN side?]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682601]]></link>
        <description><![CDATA[How is it from the LAN side when it starts to bog down from the outside?  Are you seeing the same thing or are things normal?]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682601]]></guid>
        <dc:creator><![CDATA[Rob Kuhn]]></dc:creator>
        <pubDate>Fri, 06 Jul 2012 08:09:37 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[windows server 2003 remote desktop]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682323]]></link>
        <description><![CDATA[we are have this strange problem with our windows server 2003 and remote desktoping in to it from the outside, it work fine for 3,4 days and then starts taking for forever to load the dell background without even show the login options before is kicks the connection out later it just starts  locking up and then finally just never connects to the server, to solve it requires a server restart. i cant find anything wrong in the logs in the server and our router/firewall is just reporting dropped connections and i cant figure out whats going on or causing the problem, the router is set to allow the rdp so that not the issue,]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-393052/windows-server-2003-remote-desktop?#msg-3682323]]></guid>
        <dc:creator><![CDATA[xcabal12]]></dc:creator>
        <pubDate>Thu, 05 Jul 2012 17:09:28 -0700</pubDate>
    </item>
    </channel>
</rss>

