2003 Terminal Services Logon Security

[barrycork]

I am considering implementing 2003 Terminal Services to allow our 50 or so remote users to access company systems via the web.

When I do this I will implement complex passwords to beef up security.

I want to allow access to TS from any IP to give flexibility however it does mean there is the chance of non authorised users attempting to gain access to our network by guessing usernames & passwords.

Are there any better ways of increasing serucity here? For example can TS use certificates on the client PC to grant access to logon?

Any suggestions appreciated.

Thanks,

Barry

 

[Loki1973]

Better would be to use a VPN solution to secure communications using RSA devices.