• ironhydroxide
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    12 hours ago

    And here my company ONLY allows RDP for Remote connections, claiming it’s always safer.

    • thisbenzingring@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      3
      ·
      edit-2
      11 hours ago

      are they behind firewalls or vpn?

      If you are using regular Windows rdp, you might suggest your business follow the guidelines to minimize the attack vector. At my work we use RoyalTS and it is the bee’s knees. Lots of extra security added in and lots of easy of use.

      Disable Persistent Bitmap Caching: RDP clients (such as mstsc.exe) allow users to disable bitmap caching, minimizing the exposure of session data.
      
      Strengthen Network Security: Employ Virtual Private Networks (VPNs) and robust firewalls to secure RDP connections from external threats.
      
      Monitor RDP Sessions: Log and monitor RDP sessions for suspicious activity, including unexpected outgoing connections or file movements.
      
      Restrict Privileges: Implement the principle of least privilege to limit unnecessary RDP usage.
      
      Apply Updates: Regularly update Windows systems and security patches to prevent exploitation of known vulnerabilities.