Configure AD to permit who is allowed remote access and when. This is a lot more on the human side than on the tech side, really.Īlternatively, a VPN gateway and allow RDP to the Windows boxes through the tunnel. Why were they not enabled? Management wanted access and didn't want to be bothered? Teamviewer allegedly does have security features. It was normally enabled as default - you had to shut it off manually or by Group Policy if you wanted to go bare. Windows 7 had the same basic firewall functionality built in as everything from XP SP2 through 10. Instead of fighting for big government $$, just get the right thing done. That for very low costs keeps our systems safe. (I guarantee you this is a rampant problem in companies.)Īlternatively, I think major software companies should open “government & critical infrastructure” wing. Secure, stable, auditable remote access is just as necessary if we are really going to secure systems like this. Microsoft learned this with virus protection, that is couldn’t keep punting to 3rd parties. “Premium” such as integration with AD, 2 factor, and easy patching / updates being locked away in $$ enterprise subscriptions may drive revenue, but also encourages hacking, workarounds, and vulnerabilities. And the resistance of it being a fundamental part of the OS means we end up with shoddy and cheap workarounds to get the needed functionality. Lots of non-tech people use / require it.
Remote access SHOULD be a system level and common feature. May not be a popular take hear, but I see this as part of a fundamental issue with Operating Systems.
0 kommentar(er)
