windows server 2012 remote desktop administrator access

You can use the PAW feature only for administrator accounts that will be connected to remote systems. We call this solution PAW( Privileged Access Workstation) for short. For this scenario, we will have to use a different solution.

If you want to set up a sample machine for servers that system administrators connect to for management purposes and connect to all other servers through this machine, this will not solve our job either.

The solution to this will first be required by copying that file to the company employee’s computer with the administrator right or creating a common area for this and similar installation files that machine accounts can also access.

When the support team connects to the computers of the company employees, for example, if they say let me connect to a file server and pull the relevant file, it does not happen, because you go to the file server from the employee’s computer with the machine account of the working computer.

Therefore, you should use this feature for appropriate scenarios.

However, if you want to connect to another resource as admin, because the admin password is not transferred to the machine where RDP is applied, you will try to access the resources with the machine account of the remote machine you RDP. Since the administrator in the normal connection method does not transfer his password to the RDP session, the administrator password cannot be stolen from this server or another server to which it connects through this server. How Does Restricted Admin Mode for Remote Desktop Connection Protect? It will be extremely easy for the attackers to capture the administrator password according to the memory (ram) or the connection method you use. In the table below, passwords are stored explicitly on memory in many authentications and connection methods used in active directory domain environments that are used by default. Usually, companies connect to end-user computers with administrator accounts (eg user support team).

Windows server 2012 remote desktop administrator access