Remote Desktop

[jfhoffman3]

We have 175 machines on our network. I found a few machines on our network that had remote desktop enabled. We use logmein.com for remote access and we want to make sure that all machines have remote desktop disabled. Is there a utility i can run to scan our network to see what machines have this enabled. So I don't have to go around to each machine and inspect everyone

 

[dberg35]

Is there a reason you want this disabled, it doesn't interfere with logmein.

 

[jfhoffman3]

we have had issues with non-IT people remoting into users machines. if i turn of the service for this on all machines and use log me in atleast i control access.

plus if remote desktop is enable its just another port opened that doesn't need to be.

 

[dberg35]

Block port 3389 in your firewall.

 

[jfhoffman3]

yea but anyone behind the firewall would still be able to get to it right?

 

[dberg35]

That is correct. What you can do then is from an MMC console add services of each pc then shut down the service.

 

[strongm]

>we have had issues with non-IT people remoting into users machines

Erm, if they are not administrators and are not members of the Remote Desktop Users group they shouldn't be able to.

It can also be controlled through group policies

 

[dberg35]

jfhoffman3, Lets start from the beginning please explain your current infrastructure?

 

[strongm]

I think we've lost him ...

 

[jfhoffman3]

We have 8 locations...all locations vpn into our main location. Domain controller and all other servers are in main locations. We use sonicwall for our VPN equipment

200 machines across all 8 locations

 

[dberg35]

Ok so your running AD and assuming all users are domain users then they shouldn't be able to RDP to any machines. In XP RD Turned off unless the admin turns it on and even then only an administrator can log on. If users are logging on then somewhere someone has admin right or the pc's are set to allow user to manage them. If you are not using Terminal Server the look at the following.

http://technet.microsoft.com/en-us/library/cc727977.aspx

 

[jfhoffman3]

Awesome dberg35...thanks for the help.

 

[dberg35]

Welcome hope this helps.