What is Remote Desktop?
Remote Desktop is a technology that gives you remote access to another computer, so you see its screen and control the machine as if you were sitting in front of it. In Windows, the feature is built in and based on the RDP protocol (Remote Desktop Protocol). The technology is typically used for working from home, for accessing applications that only run on a specific server, and for IT support, where a technician troubleshoots without turning up in person. Microsoft maintains thorough documentation of Remote Desktop Services if you want to dive deeper into the technology.
How to use Remote Desktop securely
The most important rule is simple: never expose RDP directly to the internet. An open port 3389 is found by automated scanners within minutes and subjected to constant login attempts. Secure use of remote desktop requires, as a minimum:
- Access via VPN or a Remote Desktop Gateway, so RDP can never be reached from the outside without an encrypted tunnel
- MFA on all accounts with remote access, so a leaked password alone is not enough to get in
- Strong passwords and lockout policies that slow down brute-force attacks
- Ongoing patching of both client and server, since vulnerabilities in RDP are regularly exploited in the wild
- Restricted permissions: only the employees who actually need it should be able to log in externally
RDP and the ransomware risk
Open RDP ports are one of the classic entry points in ransomware attacks. Attackers guess or buy valid credentials, log in as an ordinary user, and then have plenty of time to move around the network, delete backups and encrypt data. The Danish Centre for Cyber Security (cfcs.dk) has warned repeatedly about remote access specifically as an attack path against Danish businesses. If you are running RDP open to the internet today, it should be closed immediately, and the logs should be reviewed for suspicious logins.
Alternatives: Windows 365 and VDI
If you have many employees who need remote access, a cloud-based desktop is often both more secure and simpler than classic Remote Desktop. With Windows 365, every employee gets a personal Cloud PC in Microsoft's data centre, which we have described in detail in our article on Windows 365 Cloud PC. If you need more control and shared environments, VDI is the flexible alternative. Common to both is that data stays in the cloud, and that access is protected by modern identity security instead of an open port.
How MI Support IT can help
Remote support is part of our everyday work: through our 24/7 service desk we help users over secure remote access tools, wherever they work. We also design and operate secure remote access as part of cloud and hosting, from VPN and gateway setup to Windows 365 and VDI. Contact us if you would like a review of your current solution.