Which methods can guarantee the security of XP remote control?

Everyone may not be too concerned about the remote, because we usually use this function less in our lives, but this function is actually necessary at work, but because it is Remote, so sometimes the virus will find the vulnerability, so try to ensure the system security when remote.

Similar to other remote control technologies, Remote Assistance and Remote Desktop also need to consider security issues before use. For the highest level of security requirements, it is not recommended to use remote control technology in practical applications, but it is understood that this technology can also bring convenience to users. This chapter describes how to ensure safety when using remote control technology.

Remote Assistance

Remote Assistance (RA) technology allows users (inviters) to invite others (invitees) through the network to solve the actual problems they have encountered. Using this method, invitees can view the inviter's computer screen and exchange information with each other, and if the inviter allows, the invitee can also solve the problem directly by operating the inviter's computer through the network. The inviter can decide whether the invitee's permissions are screen-only or have control. To use Remote Assistance, both parties need to use the Windows XP operating system.

Remote assistance can be initiated by the inviter, which is called remote assistance; it can also be provided by the invitee for remote assistance, which is called remote assistance. The HelpAssistant account is prepared for remote assistance operations. This account was created during the installation of the system and is randomly assigned a complex password, which is then disabled. When the Remote Assistance invitation is opened, a ticket to the "Inviter" will be created on the user's computer, and port 3389 will also be opened and access to the Terminal Services will be allowed. The HelpAssistant account will be automatically enabled. Once enabled, invitees can use this account and the created ticket to access the inviter's computer. If all tickets are closed or expired, the HelpAssistant account will be automatically disabled again and Port 3389 will be closed at the same time.

Note: The Remote Desktop feature also uses Terminal Services, so port 3389 may remain open if the Remote Desktop feature is enabled.

Remote Assistance for Request Methods

Users can request remote assistance via email or Windows Messenger, or save a remote assistance request as a file. There is currently no way to limit the invitation of beginners. Anyone who can physically connect to a beginner's computer can accept his invitation. When a remote assistance request is answered, the beginner can see the expert's username. However, the only way to be sure that the connected user is the correct user is to use a password. Beginners can choose to protect this assistance with a password when creating a help request. The password is not included in the request file, and the invitee must enter the correct password to establish a connection. The password can be sent to the invitee by other methods. By. However, password complexity, password policies, and account lockout policies do not apply to this password and account.

The invitation sent via Windows Messenger is sent in plain text in XML format. The invitation file sent or saved by email is sent in MsRcIncident format. This is also a plain text XML format. So anyone can access the contents of the data, such as the machine's IP address, the port number used, and whether the inviter has password protection.

For these reasons, remote assistance is not recommended for networks with strict security requirements.