Windows Forum

Ask something
Discussion Locked

Terminal Server Encryption

0 helpful
3 replies

by ratherbfishing 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am looking for information on Terminal Server encryption. I have read that Terminal Server's own encryption makes it relatively safe over the Internet. I have also read that most folks recommend running it via VPN over the Internet.

Then I read that the encryption with TS only encrypts data, but the screen images could be captured and exploited. Well, as far I know TS does not pass data, but only key/mouse strokes and screen images! So that would make the encryption worhtless.

Okay..can some one inject a little clarity, or point me to some good information? Is it imperative to run TS via VPN over the 'net?

Thanks!

3 replies

by rob.wilcox1

Are we talking NT 4 TSE, or Windows 2000 Terminal Services? I would suggest the latter, as amongst other things it uses RDP5.0 rather than 4.0.

In W2K, you can have three levels of encryption, as outlined in MS KB Article, Q186602. (http://support.microsoft.com/support/kb/articles/Q186/6/02.ASP) So you would set your Terminal Server encryption to HIGH, and everything would be encrypted.

You can also change the port that the Terminal Server listens, this is described in Q187623, (http://support.microsoft.com/support/kb/articles/Q187/6/23.ASP) however the article does have an error or two -- it neglects to say that you need to re-import the cns file after you have edited it.

Let me know if that is any use?

Thanks

Rob W

by ratherbfishing

Thaks for being the only one to answer! Thaks for the articles. After further research this is what I found:

Actually, the difference between medium and high encryption (W2K) is the strength of the encryption key, 56 or 128 bit encryption. Withboth settings key strokes and mouse clicks ARE encrypted. Displays of server screens are not encrypted, so conceivably a hacker coudl see what you can see. maybe no big deal really.

-Thanks

This discussion is closed to new replies.