Announcement

Collapse
No announcement yet.

Passwords for remote connections only?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Passwords for remote connections only?

    I have 100 users who connect locally through our LAN to a Win2003 TS server. Some of the same users also connect remotely via port forwarding on our firewall.

    The remote users use notebooks which also double as their office computers.

    Is there any way to require only the remote connections to use passwords while letting the local users to either save passwords in their RDP files or to not use passwords at all?

    Thanks,
    Chuck

  • #2
    Re: Passwords for remote connections only?

    You can use autologon or citrix authntication etc.
    However, using laptop without a user/pass may create a security risk...
    Best Regards,

    Yuval Sinay

    LinkedIn: https://www.linkedin.com/in/yuval14, Blog: http://blogs.microsoft.co.il/blogs/yuval14

    Comment


    • #3
      Re: Passwords for remote connections only?

      Yuval,

      Thanks for the quick response.

      Yes, I agree with you that roaming notebooks without user/passwords is a huge security risk.

      I'm aware of the auto logon feature, but that's not quite what I'm looking for. If I turn off the "Always prompt for password" option in the TS Configuration it affects all users globally. Yes, this allows me to enter and save passwords in the RDP file on selected clients, but it also allows users with enough knowhow to make changes themselves.

      What I'm really looking for is a way to force certain machines or users to always login, while the others can use auto logon if they choose. My goal is to require that all connections from the outside world get prompted for their credentials while LAN users have the choice.

      I'm starting to see that there's probably not any easy, global setting somewhere in the TS config or the AD. But maybe, there's some reg or GP setting that I can apply to my remote machines that forces the TS logon screen even if they tamper with their RDP file.

      Any thoughts?

      Chuck

      Comment


      • #4
        Re: Passwords for remote connections only?

        The easy way will be to use some SSL VPN solution so you can restrict access etc.
        Best Regards,

        Yuval Sinay

        LinkedIn: https://www.linkedin.com/in/yuval14, Blog: http://blogs.microsoft.co.il/blogs/yuval14

        Comment


        • #5
          Re: Passwords for remote connections only?

          Thanks again for your help.

          After much research it looks like there really isn't any easy way to do this.

          Instead I'm going to use a WMI filter and group policy to force remote users to always login. I'm not that familiar with WMI filtering, I'm not sure if I can filter on the IP address; but I can at least filter by computer name.

          Thanks,

          Chuck

          Comment

          Working...
          X