XP Remote Desktop Vulnerability Solution

The Remote Desktop functionality provided by the Ghost XP SP3 system, while convenient for remote maintenance systems, is now proven to have design flaws that could lead to an attacker obtaining account information for Remote Desktop on the system, which could help with further attacks. To resolve this problem, you can disable the Remote Desktop feature when you are not using it, as shown in the following procedure.

Step 1th: Right-徤 Click the My Computer icon, and in the shortcut menu that pops up, select Properties to open the System Properties dialog box.

Step 2nd: Switch to the Remote tab, and in the Remote Desktop area, uncheck the "Allow users to connect remotely to this computer" check box, as shown in Figure 1.

3rd Step: Click OK to save the settings.

Tip: When you establish a network connection, Windows XP Remote Desktop sends the user name in clear text to the client that connects it. The user name sent may be the user name of the remote host, or the user name commonly used by the client, and the sniffer program on the network may capture these account information.