34,333
edits
Changes
→Enabling Remote Desktop Administration on the Remote Server
The Remote properties dialog provides a number of options. The default setting is to disallow remote connections to the computer system. The second option allows remote desktop connections from any version of the Remote Desktop client. The third, and most secure option, will only allow connections from Remote Desktop clients with Network Level Authentication support. This typically will only allow access to systems providing secure network authentication such as Windows Vista and Windows Server 2008.
If the Windows Firewall is active, the act of enabling Remote Desktop administration also results in the creation of a firewall exception allowing Remote Desktop Protocol (RDP) traffic to pass through on TCP port 3389. This default port can be changed by changing this setting in the Registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TerminalServer\WinStations\RDP-tcp\PortNumber. The easist way to locate this registry key value is to execute ''regedit'' from the ''Run'' window or a command prompt, select ''Edit - > Find'' and enter ''RDP-tcp''.
== Controlling Remote Desktop Access ==
The default configuration for Remote Desktop is to allow all members of the Administration group to connect remotely. Active Directory also contains a ''Remote Desktop Users'' group to which users may be added to provide Remote Desktop access privileges. To provide users with remote desktop open the ''Control Panel -> System and Maintenance -> System -> Remote settings'' and click on the