Good alternative to terminal services?

[AncientTiger]

I'm looking for an alternate way to have remote access to our server. We had been using terminal services, but the attacks that were getting through it was absolutely attrocious.

Is there something out there that works similar, but is more secure? OR is there a way (link to article would be appreciated) to lock down terminal services better? As with any microsoft product, it's target numero uno in the hacker world, so I'm thinking it'd be better to go another route.

Thanks in advance!

------------------------------------
Nearly 20 years of programming, and still learning every day!

 

[Shady66]

We use a company called Avocent which has KVM over IP switches. I have boot level control over 40+ servers in my server room. I use the DSView software at work and also VPN in from home.

 

[tfg13]

I also have KVM over IP switches. They are nice and efficient. AncientTiger, are you trying to allow users to login in application mode, or is this just for administration?

 

[VinceF]

The solution you seek may be more that one thing.

Security is best done in layers, each one with a specific purpose, and it should start at your firewall.

MS has quite a bit of info for securing terminal services, and the application of good security and user tights restriction can go a long way to minimize attacks.

If you are looking at remote management then I suggext using only a secure connection, like a VPN, to connect to your servers. Anly allow specific ports past your firewall (you can change the ts port), and only allow the permissions and rights that are absolutely needed. If someone needs admin rights, find out why, and see if you can get around that.