Prev: Temporal licenses in 2008
Next: windows 2003 member (installed with terminal services)
From: JimHelps on 14 Apr 2010 15:49
Hi Marco, I've had this issue also and haven't found a permanent solution yet
that will block at the firewall, but I got a good tip that has helped me
sleep better. Change the username of Administrator to something else, and
also integrate complex passwords through your server policies so it will not
be so easy to guess or iterate.

"Marco" wrote:

> Hi, Is there any way to block an IP address if the users is not able to login
> sucessfuly after a number of times?
>
> The issue is that I've got a public ip address in order my users can access
> to my server from home.
>
> I'm been check and there some people (strange people of the plant, maybe
> hackers) truing to force the logon.
>
> How can I block their IP address? after they try to log x times?
>
> Regards,
> Marco
From: Roman Porter [MSFT] on 16 Apr 2010 15:36
There is no way to block an IP address from the server, but one solution is
to use a different port on the server. Then tell your users to connect to
that port instead of the standard RDP port. This should reduce the amount
of unauthorized logons your server receives.

If you are running WS08 or above, you should also look into using a
TSGateway server in the DMZ and keeping your TS server in a private network.
This will allow for a lot more flexibility and security.

Thanks,
Roman

"JimHelps" <JimHelps(a)discussions.microsoft.com> wrote in message
news:9D472A11-71C6-4061-90D8-DBA3894F30AA(a)microsoft.com...
> Hi Marco, I've had this issue also and haven't found a permanent solution
> yet
> that will block at the firewall, but I got a good tip that has helped me
> sleep better. Change the username of Administrator to something else, and
> also integrate complex passwords through your server policies so it will
> not
> be so easy to guess or iterate.
>
> "Marco" wrote:
>
>> Hi, Is there any way to block an IP address if the users is not able to
>> login
>> sucessfuly after a number of times?
>>
>> The issue is that I've got a public ip address in order my users can
>> access
>> to my server from home.
>>
>> I'm been check and there some people (strange people of the plant, maybe
>> hackers) truing to force the logon.
>>
>> How can I block their IP address? after they try to log x times?
>>
>> Regards,
>> Marco

 | 
Pages: 1
Prev: Temporal licenses in 2008
Next: windows 2003 member (installed with terminal services)