Making RDP more secure

[mattx]

Before I go and dig deep into the murky world of Technet and other related user manuals etc, does anyone know a good way of allowing a user to have access to a server using RDP but NOT giving them full Admin permissions ?

I have a member of staff who wants access to a server to use the E-portal software for our Facility setup.

For some really stupid reason the brain dead twits who wrote Facility have installed a bit of software that controls the E-portal, and that can ONLY be run on the server and NOT on an end client.

I have found this app - 2X SecureRDP http://www.2x.com/securerdp/

But it does not have all the bells and whistles I am after - maybe some setting s on some NTFS permissions may be in order....

Unless someone has a better solution...

[NetworkGeezer]

Is you your server a DC or member server. If the second then check to see if there is Remote Desktop Users group in local user management tool and add them there.

 

Alternatively you do the following:

net localgroup "Remote Desktop Users" /add teacher_yikes[code]
 

Why can the program run on the server, if you don't mind me asking?

[mattx]

Thanks for that - I think that has solved my problem.

I just created a user [ from the domain ] on the local server, logged in and the desktop / profile was created. I was then able to fire off the app. On checking the permissions on other apps on the server there was no way [ yet ] I was able to do any damage. [ Like delete etc ]

Thanks again.