Re: Remote Desktop Policies

["King, Ronald A." <raking () NSU EDU>]

RDP access available through a VPN tunnel.  VPN access granted upon request and signed off by their supervisor.  VPN is 
limited to RDP access only for the faculty and most staff.  The user sets up RDP for their account on their workstation 
when logged in while physically at the computer.

Our help desk folks can remote into each of the workstations on our domain using Microsoft's Configuration Manager's 
Remote Tools.  Standard users can gain local administrative privileges, but, this has to be requested from someone in 
management, such as a Dean, Director or VP, is restricted to the specific computers requested, and, include acceptable 
justification.  Justification usually includes taking the responsibility for supporting the computers access is granted 
on.


Ronald King
Security Engineer
Norfolk State University
Marie V. McDemmond Center for Applied Research
Suite 401
700 Park Ave.
Norfolk, Virginia  23504
Phone:  757-823-3918
Fax: 757-823-2128
Email: raking () nsu edu<mailto:raking () nsu edu>
http://security.nsu.edu

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Webb, 
Justin
Sent: Tuesday, December 21, 2010 2:44 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Remote Desktop Policies

Hi All:

                We are in the process of reviewing our policies regarding Remote Desktop and I am curious how other 
institutions are handling this. Do you allow it at all, or with qualifications (must be VPNed in), and do you use a 
software suite (Citrix, e.g.), or RDP (or VNC,  the like)? Also, do you require some sort of sign-off before access is 
given, from a supervisor, or the employee themselves? Lastly, do you use RDP for remote support and allow local admin 
access to the machine? Thanks in advance.

Sincerely,

Justin P. Webb, GCIH
Security Analyst
IT Services, Marquette University
414-288-4196
justin.webb () marquette edu<mailto:justin.webb () marquette edu>