Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

It's unclear to me exactly how secure Remote Desktop access from Mac OS X to a Windows Server 2003 machine is. Is the communication encrypted by default? What level of encryption?

Are there best practices for making this as secure as possible? I found but it's unclear how much of that is still relevant for current versions of RDP and Windows Server.

I know I can tunnel RDP over ssh, but is that overkill or redundant?

share|improve this question

migrated from Dec 2 '09 at 23:59

This question came from our site for professional and enthusiast programmers.

You should ask this at either or – Graviton Dec 2 '09 at 4:03

A number of years ago RDP was vulnerable to a man-in-the-middle attack where an attacker could act as an RDP server, but route all traffic to the real server. The RDP client would not complain that the attacker was not the real RDP server. So the attacker could watch all traffic. A fix was released for the RDP client that came out around Vista's release (v6).

RDP does use encryption (RC4) in v6+. RC4 can be vulnerable, but there are ways to make it more secure. There is an interesting read on RC4 and RDP by a "security" group (PDF).

You can always tunnel over SSH, it won't buy you much beyond providing an extra layer of security. Personally, I would make sure the client and server are at least complaint with RDP v6 (I believe Windows Update upgrade XP's client, so 2003 should be ok). Plus, based on personal experience trying to get SSH to work on Windows, I would just go with straight RDP.

share|improve this answer
SSH on windows is easy. install copssh (link below), activate a user, open port 22 on any all firewall/routers to that computer. Done. Works fine as an ssh tunnel. I have it running on win7 x64. – Tony Feb 3 '10 at 13:11

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .