OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Michael Patrick (mikepat1AIRMAIL.NET)
Date: Fri Mar 02 2001 - 19:12:22 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    I believe the difference between Admin and App mode is licensing, not
    capabilities. With Admin mode, you don't need the Licensing server
    portion; with App you do. Also, Admin is easier on the box because it only
    has to be ready for two occasional sessions, not dozens of all the time
    sessions (different performance tweaks).

    Michael

    At 14:36 2001-03-02 -0800, you wrote:
    >I must have missed something in the thread... I didn't see any reference to
    >the need for lots of multiple concurrent connections.
    >Besides, AFAIK WinVNC only supports a single logon. Let me rephrase that- I
    >think you can have multiple concurrent logons, but they will all see the
    >same desktop...
    >
    >The tserver remote admin option, even though limited to 2 concurrent logons,
    >will still give you way more functionality in that both logons can be
    >running their own processes indipendently with their own desktops.
    >
    >Being curious, what function was not available in application mode?
    >AD
    >
    >----- Original Message -----
    >From: "Jeff Neithercutt" <neitherjWELLSFARGO.COM>
    >To: <FOCUS-MSSECURITYFOCUS.COM>
    >Sent: Friday, March 02, 2001 12:29 PM
    >Subject: Re: Win2K Terminal Service as Web Server Admin Tool
    >
    >
    > > -----BEGIN PGP SIGNED MESSAGE-----
    > > Hash: SHA1
    > >
    > > True, but that limits you to a total of two connections. Which means
    > > if you need more than two people to connect to the server at once,
    > > you MUST run it in application mode, because MS limits the total TS
    > > connections to two in remote administration. Unfortunately, what we
    > > needed it to do for us was not available in application mode.
    > >
    > > - -----Original Message-----
    > > From: Attonbitus Deus [mailto:ThorHAMMEROFGOD.COM]
    > > Sent: Wednesday, February 28, 2001 10:06 AM
    > > To: FOCUS-MSSECURITYFOCUS.COM
    > > Subject: Re: Win2K Terminal Service as Web Server Admin Tool
    > >
    > >
    > > Actually, Terminal Services only requires additional licenses when in
    > > Application Server mode, not when in Remote Administration mode(AFA
    > > 2k is
    > > concerned): therefore, there is no additional cost to configure a
    > > Server/Adv
    > > Server as a TS for remote admin.
    > >
    > > AD
    > >
    > > - ----- Original Message -----
    > > From: "Steve" <steve.taiFRIJ.COM.AU>
    > > To: <FOCUS-MSSECURITYFOCUS.COM>
    > > Sent: Tuesday, February 27, 2001 2:51 PM
    > > Subject: Re: Win2K Terminal Service as Web Server Admin Tool
    > >
    > >
    > > > VNC will install as a service on NT server hence you can restart
    > > > easily
    > > however
    > > > I think for the purpose of administration, Terminal Server is the
    > > > more
    > > expensive
    > > > (free WinVNC :} ) and practical. However, I have a clients client
    > > > who has
    > > WinTS
    > > > and Webserver IIS. IMHO, it is a bad idea to mix the two as a
    > > > buffer
    > > overflow
    > > > attack or some sort of Unicode bug will reveal the administrators
    > > > password
    > > and
    > > > all of a sudden, you have all control of the PC remotely, clear
    > > > logs etc
    > > etc
    > > >
    > > >
    > > > "Schroeder, Kurt" wrote:
    > > >
    > > > > You could try WTS and use IIS/TSWEB server package for Web based
    > > Terminal
    > > > > server control. I use it as my remote control package for
    > > > > internal
    > > servers.
    > > > > I would appreciate hearing about any security concerns regarding
    > > exposure of
    > > > > this service.
    > > > >
    > > > >
    > > http://www.microsoft.com/windows2000/downloads/recommended/tsac/defaul
    > > t.asp
    > > > >
    > > > > -----Original Message-----
    > > > > From: Stephane Moulec [mailto:smouleccuisinesolutions.com]
    > > > > Sent: Wednesday, February 21, 2001 10:45 AM
    > > > > To: FOCUS-MSSECURITYFOCUS.COM
    > > > > Subject: Win2K Terminal Service as Web Server Admin Tool
    > > > >
    > > > > I installed as web/mail server on a Win2K server. I am looking at
    > > several
    > > > > options for the management of the server:
    > > > >
    > > > > 1- PCAnywhere / VNC et. al.
    > > > >
    > > > > 2- Web interface for IIS and my mail software (over SSL)
    > > > >
    > > > > 3- (so far my favorite) Windows Terminal Service (remote
    > > > > administration only).
    > > > >
    > > > > I wonder how secure the WTS interface is (is the traffic
    > > > > encrypted by default? Is it easy to crack? Do I expose the server
    > > > > too much by having
    > > WTS
    > > > > enabled? Can I change the port it is running on so that a port
    > > > > scan does
    > > not
    > > > > reveal it?)
    > > > >
    > > > > I would appreciate any feedback on Windows Terminal Service as a
    > > > > remote admin solution for a webserver. Please no feedback on
    > > > > PcAnywhere, VNC or
    > > IIS
    > > > > Webadmin tools, the list's archive has more info that I need on
    > > > > these topics.
    > > > >
    > > > > Thanks.
    > > > >
    > > > > -------------------------------
    > > > > Stephane Moulec
    > > > > Network Systems Manager
    > > > > Cuisine Solutions, Inc.
    > > > > http://www.cuisinesolutions.com
    > > > >
    > > > > "I love Saturday morning cartoons, what classic humour! This is
    > > > > what entertainment is all about ... Idiots, explosives and
    > > > > falling anvils." -- Calvin and Hobbes, Bill Watterson
    > > > >
    > > > > -------------------------------
    > >
    > > -----BEGIN PGP SIGNATURE-----
    > > Version: PGP 6.5.3
    > >
    > > iQA/AwUBOqACk0zIW3/a/P0NEQKw7wCbBiwMVfTtFa09YnIoWOtrwrIeMM8An1dS
    > > kKlAqz2IveZQedqPu1+Q2eIX
    > > =Y/n7
    > > -----END PGP SIGNATURE-----