利用远程桌面管理ＷｉｎｄｏｗｓＳｅｒｖｅｒ２００３

Using Remote Desktop for Administration for remotely managing computers running Windows Server 2003 can greatly reduce administrative overhead in any Windows Server 2003 environment.

Administrators can access servers from anywhere: be it inside the computer room, or from halfway around the world over a WAN, VPN, or dial-up connection. They can start time-consuming batch processing jobs like tape backups, disconnect, and then dial-in to the corporate network at a later time to check the progress.

Server application and operating system upgrades can be completed remotely, as well as tasks that are not usually possible unless the administrator is sitting at the console—for example, domain controller promotion/demotion and disk defragmentation.

Server file system tasks, such as copying large files and virus scanning, are much more efficient when performed within a Terminal Services session, rather than using utilities that are executed on a client computer. And administration tasks are quicker and more intuitive than using command-line utilities, although it is still possible to open up a command shell.

Remote Desktop for Administration includes the following features and benefits:

·         Graphical administration of Windows Server 2003 and Windows 2000 servers from any Terminal Services client. (Clients are available for computers running Windows for Workgroups, Windows 95, Windows 98, Windows CE 2.11, Windows CE.NET, Windows NT®, Windows 2000, Windows XP Professional, and Macintosh OS-X.)

·         Remote upgrades, reboots, and promotion and demotion of domain controllers.

·         Access to servers over low-bandwidth connections, with up to 128-bit encryption.

·         Roaming disconnect support. (This support enables data-sensitive or time-consuming tasks to be completed successfully if the remote session is disconnected deliberately, or due to network problems.)

·         Remote application installation and execution—with fast access to local disks and media (For example, when copying large files and virus scans).

·         Negligible performance impact on the server, and no impact on application compatibility.

·         Two remote administrators can share a session for collaboration purposes.

·         Remote Desktop Protocol (RDP) feature set. This includes local and network printing; file system redirection, clipboard mapping (cut, copy and paste); smart card redirection; serial device redirection; and support for any RDP virtual channel applications.

 

 

这是一个新概念！以前没听说过，关于连接过成功中的加密等级。

Changing the Session Encryption Levels

By default, all Terminal Services sessions connect using high encryption, which provides bi-directional security using a 128-bit cipher. However, some older versions of the Terminal Services client do not support this high level of encryption. Clients that do not support this level of encryption will not be able to connect. Therefore, the encryption level can be set to “client compatible” to provide the highest encryption level supported by the client. Both levels use the standard RSA RC4 encryption.

Changing the encryption level is performed within the Terminal Services Configuration utility, located under All Programs, Administrative Tools. Open the Properties dialog box of the Microsoft RDP 5.2 protocol type in the Connections folder, as shown in Figure 2 below, and click the General tab. This reveals the Encryption level box, which can be changed between high and client compatible.