PCI compliance: using SSL as transport layer for RDP (Terminal Service)
        Posted  
        
            by Crashalot
        on Server Fault
        
        See other posts from Server Fault
        
            or by Crashalot
        
        
        
        Published on 2010-04-12T21:50:22Z
        Indexed on 
            2010/04/12
            23:23 UTC
        
        
        Read the original article
        Hit count: 468
        
My client failed her PCI compliance audit. The server supports Remote Desktop (Terminal Service) but only provides encryption and not authentication. This exposes the server to Man-In-The-Middle attacks.
The supposed solution is to force SSL as the transport layer for RDP.
Anyone know how to do this?
The server runs Windows 2003.
© Server Fault or respective owner