|
Posted by dw85745 on August 11, 2006, 9:43 am
If you were Registered and logged in, you could reply and use other advanced thread options
I know a firewall will work to control ingress/egress in most cases.
Unfortunately, firewalls are not 100% effective.
The purpose of my post is three fold.
1) Check a pre-XP machine to see what -- if any -- remote access exists.
2) Examine a specific needed DLL (not mine) to see if it contains any SDK
functions that may be remote related,
3) Climb the learning curve about remote access -- MSDN and web searches
have turned up very little.
-------------------------------
Ian: Thanks for the info.
Now the question is where do I go and what do I "toggle" to turn
them off?
Thanks
David
---------------------------------------------
> > Limiting File, Registry, and other remote access by Techs or anyone
else.
>
> OK then, we just sit back and wait till your computer gives a glitch.
>
> 'HEEEELLPP!!' ... Sorry. No can do. ;-)
>
> Seriously, the default XP config doesn't allow remote access UNLESS the
> computer is a domain-member (In which case policies can over-ride any
> security settings you make anyway) or someone purposefuly turns it on.
>
> To make an XP machine more secure in this respect, I'd disable:
>
> Telnet
> Terminal Services
> Remote Registry
> RRAS if not used
> Fast User Switching
>
> Disabling Terminal Services stops Remote Desktop from working. However,
if
> someone has had a chance to install software, there is also the
possibility
> of a hidden VNC server existing on the computer. If so this would be
visible
> as a process in Task Manager. (VNC normally shows a system-tray icon, but
> there are ways to hide this)
>
> Bottom-line is that the best protection is a configurable firewall which
> will block acccess from the local LAN to all ports commonly used for
> remote-control. That way even if the software gets installed/activated it
> won't work. The inbuilt firewall is adequate provided you uncheck the
> exceptions for remote assistance, but Kerio or ZoneAalarm would be better.
>
>
| 
XML site map