Windows 10: Safety of network-level authentication for remote desktop?

I have a number of PCs which are joined on my AzureAD domain.

I know that traditional wisdom is not to leave a remote desktop RDP port open to the wide web. Does this still hold true when network-level authentication is enabled?

As far as I can tell, it's not possible to (for example), try to brute-force the password, as this setup is more akin to an SSH key - you would need another PC also joined on my AzureAD in order to connect to the remote desktop.

submitted by /u/my_orange_confusion
[link] [comments]

:)

 

How to enable Network Level Authentication for RDP?

Hi K.Kong,

The question that you have is too complex to be answered here in the Microsoft Answers forums. For more information regarding
Remote Desktop Configurations and Windows Servers, I suggest that you post your question on our
TechNet forums instead. I found some posts there that might help you. You can access them in the following links:

RDP issues, remote computers
requires network level authentication

Configure Network Level Authentication for Remote Desktop
Services Connections

Regards.

 

How To Create Two Factor Authentication for Remote Desktop

Hello Bill sorry for the late reply.

You said that you were recently infected with a ransomware virus & that it probably came through your open remote desktop, so yes it's a good idea to change remote software, & skip windows RDP & jump desktop*Smile

Change the software from Windows RDP & Jump Desktop to Teamviewer.
Install teamviewer on all computers.
Set up unattended access on the computers you wish to connect to.
( You can do this in the installation process or when teamviewer is installed @ Settings > Security )




And make a teamviewer account ( if you haven't already done so *Smile )
This will make it so that you can connect to them through a list ( Once your signed in )
which is very convenient.



Also don't forget to add the two step authentication.

Let me know how it went
// Mike

 

How To Create Two Factor Authentication for Remote Desktop

Hello artmanphoto, are you using the built in remote software that comes with windows 10 ?
I too use remote software, so can i suggest you change to one of the following.
Because the remote software that comes with windows is very insecure.

Anydesk
To use 2 step authenticator with anydesk go here

Teamviewer
To use 2 step authenticator with teamviewer go here


Splashtop
To use 2 step authenticator with splashtop go here


Radmin
Does not have 2 step authentication as far as i know.
But it does have IP Filter, very high security.

All 4 have very high security,
Anydesk, Splashtop & teamviewer all have so you can add two factor authentication with google authenticator.
Personally i prefer radmin

* Had to add Anydesk to my suggestion because it's just to good to leave out *