RE: RDP Client for Windows

["Erick Grau" <egrau () hungmao com>]

Group policies are nothing but Registry changes pushed through by
Domain policies.  You would need to research the registry keys
That would control them.  Doing a quick glance I found:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal
Server\Wds\rdpwd

There is a REG_DWORD key called fAutoClientDrives.  I believe the value 
Of "0" will disable.  You will need to test.

Hope this helps.

Erick

________________________________________________

Erick Grau
Information Technology Manager 

Khronos LLC
800 Third Avenue, 33rd Floor
New York, NY 10022

egrau () khronos com
Office:          212.872.1766
Fax:             212.208.4395
Cell:             646.361.6828
________________________________________________



-----Original Message-----
From: Chris Halverson [mailto:chris.halverson () encana com] 
Sent: Wednesday, December 17, 2003 1:28 PM
To: security-basics () securityfocus com
Subject: RDP Client for Windows



We are currently requiring the use of Remote Desktop Connections for
numerous users to access their office computers from home.  The connections
are running through a secure VPN tunnel and are working as designed, with
one exception.  We do not want users accessing there home hard drives
through this method.  With the RDP client by default the sharing of the home
drives is unchecked, but is very easy to enable it and then users can
transfer internal documents onto a home computer or allow Viruses from the
home computer onto the Corporate Network.



Any thoughts on how to rectify this?



Group Policy is definately out of the question, we cannot push group policy
to the users home PC's.

---------------------------------------------------------------------------
----------------------------------------------------------------------------



---------------------------------------------------------------------------
----------------------------------------------------------------------------