 |
 |
Yes, we make extensive use of RDP -- most importantly, to work remotely with processes that run for long periods of time. I do use RDP occasionally for admin tasks that require use of the local Administrator account. I presume that it's time for a different approach... Ernie On 6/17/2014 12:38 PM, Geoffrey Duke wrote: > > It would do so only if you are using a local account (e.g., the > Administrator account), or a *-tech account. If you are using a domain > account, with appropriate permissions, RDP should still work. Do you > RDP to workstations? > > --Geoff > > *From:*Technology Discussion at UVM [mailto:[log in to unmask]] > *On Behalf Of *Ernie Buford > *Sent:* Tuesday, June 17, 2014 10:39 AM > *To:* [log in to unmask] > *Subject:* Re: Notice - Change to workstations in Campus Domain > > Your description sounds like this change will affect the ability to > connect to other workstations via Remote Desktop Connection. True? > > On 6/16/2014 4:54 PM, Geoffrey Duke wrote: > > As mentioned in the Collaborative IT Discussion on Wednesday last > week, we have made a small change to the Security Policy on > workstations that are part of the Campus domain. We configured the > Deny access to this computer from the network right, adding the > ETS-LocalAdmins group and the new well-known group Local Account. > > This limits the utility of compromised credentials, addressing a > common method for moving through an organization and harvesting > additional credentials. This configuration change shouldn't impact > the ability to log into a workstation using either a local account > or a *-tech account, but you won't be able to use such an account > to connect from one workstation to another. > > Please let us know if you have any questions or concerns about > this change, > > --Geoff > > Geoffrey Duke > 802.656.1172 | Sr System Administrator > <http://www.uvm.edu/%7Egcd>| Enterprise Technology Services > <http://www.uvm.edu/ets>| University of Vermont <http://www.uvm.edu/> >