SN 781: SpiKey

[big_D]

This thread was a day late… I already made my reply to the podcast here:

SN 781: SpiKey (missing?)

I got the podcast this morning, but the autopost for the topic hasn’t turned up… Anyway, the bit about RDP and the only security is a strong password is not quite true. A terminal server will use the AD and group policies, so you can enforce the use of a smartcard, for example, as second factor. We used to use that at a previous employer. All employees worked on the terminal server and had a thin client or PC with smart card reader and a smart card. Without the card, they couldn’t log onto th…

I’ll also add, we had to use VPN to get to the terminal server, on top of having to use the security card.