Windows Server Fortification

Helping Fortify a Windows Server Installation

Remote Desktop Network Level Authentication

with one comment

It is recommended that Network Level Authentication. This authentication method has the following advantages:

  • It requires fewer remote computer resources initially. The remote computer uses a limited number of resources before authenticating the user, rather than starting a full remote desktop connection as in previous versions.
  • It can help provide better security by reducing the risk of denial-of-service attacks.

Source: http://technet.microsoft.com/en-us/library/cc732713.aspx

In essence, the server will not allocate resources for the desktop until the user has successfully authenticated. The denial of service attacks refer to a mass number of clients attempting to connect to the server at once. Were the standard method of launching the desktop before authentication is successful active, mass desktops would be created, putting a strain on the server. This authentication can be enabled through the following steps:

Bring up the Start Menu and click on “Control Panel”

Click on the “System” icon.

Click on the “Remote settings” link in the top left. You will need to have proper administrative privileges to access this.

Click the option labeled “Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)”. With this step completed, only systems running remote desktop clients with Network Level Authentication support will be able to connect.

Written by Chris

June 21, 2011 at 5:38 pm

One Response

Subscribe to comments with RSS.

  1. […] Remote Desktop Network Level Authentication […]


Leave a comment