windows server 2012 remote desktop security

Negotiate - This is the default setting.SSL (TLS 1.0) - SSL (TLS 1.0) will be used for server authentication and for encrypting all data transferred between the server and the client.

Services page on the Windows Server 2008 R2 TechCenter (). More information about RD Session Host, see the Remote Desktop Server and the client computer must be correctly configured for TLS to RD Session Host server and the client computer. RD Session Host server and encrypts all communication between the Remote Desktop Services sessions by requiring the use of Transport Sessions are configured to negotiate the encryption level from theĬlient to the RD Session Host server. The Help file summarizes much better than I can so I will just quote that.Ĭonfigure Server Authentication and Encryption NLA mode is much more secure and has less possibilities for people to capture data from or intercept the connection while it is being established.įor the connection itself there are many fine tuning settings that are all set server side. When you allow remote desktop you can choose if you only want to allow NLA connections or allow connections from the older legacy mode too. There are two different modes for securing the creation of the connection for remote desktop, Legacy mode (I don't think it has a name) and Network Level Authentication (NLA). There are two aspects of the security you should be aware of, how it creates the connection and how the connection is secured.

Windows server 2012 remote desktop security