In a slightly larger LAN working environment, network administrators often use remote control to manage servers or important work hosts; although this kind of control method can improve the efficiency of network management, the security threats brought by remote control methods are often ignored by managers. To ensure the security of remote control operations on the server, the Windows Server 2008 system has specifically been enhanced in this regard, with a number of new security features being introduced, but not enabled by default, which requires our own hands to set the system properly, To ensure remote control of the security of the Windows Server 2008 Server System.
1. Only allow designated personnel for remote control
If any ordinary user is allowed to remotely control the Windows Server 2008 Server system, the security of the server system must be very difficult to secure effectively. In view of this, we can make the appropriate settings for the Windows Server 2008 Server system, only allow the designated person through Remote Desktop Connection way to remote control, the following is the specific setup steps:
First, open the Start menu of the Windows Server 2008 Server System desktop, expand Programs, Administrative Tools, and Server Manager options in turn, and in the corresponding System Server Manager console window that appears, click the Server Management node option in the left child pane. Then select the Server Summary settings item under the Target Node branch, and then click the Configure Remote Desktop project to enter the Settings dialog box for the remote control Windows Server 2008 system;
Next, click the Select User button in the Remote Desktop section of the Settings dialog box. Open the Setup interface shown in Figure 1, where we see all the user accounts that can be remotely controlled for the Windows Server 2008 Server system, and once you see a strange user account or a user account that does not trust you , we can select it and click the "Delete" button, remove it from the system; Click the Add button in the corresponding settings interface to open the User Account Settings dialog box, select and add the specified administrator user account, and then click OK to end the user account setup operation. As a result, the Windows Server 2008 Server system will only allow remote administration operations by the specified system administrator, and not allow any other user to remotely control the operation.
Figure 1