Securing our RD Web access Remote access

[maxrebo]

Hi,

I`m looking at securing our RD Web Remote Access the best we can, were using RD Web access on a Windows 2021 R2 VM, from previous posts, setting up MFA is a must (which we haven't yet implemented!), is there any other I need to consider?.

 

Thanks

[Griff]

MFA and also making sure you have Remote Desktop Gateway setup if you're not using a VPN solution. You have probably already seen it but there is a good thread here discussing some of this http://www.edugeek.net/forums/how-do-you-do/221119-2fa-rds-connections-how-do-you-do.html

 

Also if you don't already its worth setting up a group to allow remote users instead of just bulk allowing all staff, sorry if that sounds basic but I got caught out big time with this a years and years ago when we got hacked due to an old staff account with remote permissions.

Edited April 14, 2021 by Griff

[TechMonkey]

If you can, setup Azure Application Proxy. Stops a direct connection into your network, meaning no open ports.

[free780]

There is also a html 5 rdp client you can use through the app proxy which will secure access and ensure MFA.

[ITGURU]

whatever method you use, rdp files or html5, ensure your gateway is locked down, so that someone cannot load up mstsc use the gateway address and get a full desktop onto the server!

[Griff]

I just setup HTML5 web client here does anyone know how to now get rid of the RDP file method that was being used previously?

[fiza]

I just setup HTML5 web client here does anyone know how to now get rid of the RDP file method that was being used previously?

I have the same issue! Would be good to retire the old method.