Planning for Remote Desktop Services

To successfully deploy a Remote Desktop Services environment requires thorough planning and testing prior to production rollout. Criteria such as application resource usage, security requirements, physical location, network access, licensing, fault tolerance, and information indicating how users will be utilizing their sessions all contribute to the way Remote Desktop Services implementation should be designed.

Planning for Remote Desktop for Administration

Unless Remote Desktop Services is viewed as a security risk, it is recommended to enable Remote Desktop for Administration on all internal servers to allow for remote administration. For servers that are on the Internet and for demilitarized zone (DMZ) networks, Remote Desktop Services can be used, but access should be limited to predefined separate IP addresses using firewall access lists to eliminate unauthorized attempts to log on to a server. In addition, those servers should be closely monitored for unauthorized attempts to access the system.