OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: W2KTerminal Services Security
From: Free, Bob (RWF4PGE.COM)
Date: Thu Sep 07 2000 - 16:23:47 CDT

Yup, I got every thing I could find on TechNet, MS web etc. I bought a book
that has some good stuff. AD is a long way off for us. I just sent a note to
Mike Howard of MS who wrote a W2K security book asking how much he covers
it. I'm also having out TAM try to get me some internal docs since their
guys are high on TS.

David LeBlanc and Mike gave an awsome presentation at LISA-NT this summer
and David was very high on TS for remote administration via dial-up. I tried
it as soon as I got back and it rocks, even over a 21.4 connection. Already
saved me several trips to the office. ;-]

 I think it's pretty awsome compared to the 4.0 terminal server and now the
price is right.

Bob Free
Sr Network Specialist
Pacific Gas & Electric Co. Auburn, CA
ISTS/ITUSS/DC/System Server Support

-----Original Message-----
From: Marc Massar [mailto:marcFIREBROOKINC.COM]
Sent: Wednesday, September 06, 2000 5:35 PM
To: FOCUS-MSSECURITYFOCUS.COM
Subject: Re: [FOCUS-MS] W2KTerminal Services Security

I'm sure you've already checked knowledge base...I
found that most of the security articles focus on
win2K terminal server in an AD environment. If you
are running AD, check this article
http://support.microsoft.com/support/kb/articles/Q260/
3/70.ASP?LN=EN-US&SD=gn&FR=0
Locking down resources is pretty easy if you are
using OU's and enforce group policies.
I agree with you, though. The info out there is weak
and there isn't much.

> I'm becoming increasingly frustrated by my inability
to find any good 2KTS
> security guidelines. Articles abound for NT4TS but
there's not much at all
> on W2K (not that I can find anyway)
>
> If anyone has any good pointers, I'd appreciate it.
>
> Bob Free
> Sr Network Specialist
> Pacific Gas & Electric Co. Auburn, CA
> ISTS/ITUSS/DC/System Server Support
>
>