Remote Desktop
Summary
PDF p.149Remote desktop access allows users to connect to a specific computer over a network, transferring screen, audio, mouse, and keyboard data. This can be done using protocols like Microsoft's Remote Desktop Protocol (RDP) or alternatives like TeamViewer and Virtual Network Computing (VNC). Modern solutions also support web browser clients using HTML5 and WebSocket.
In plain words
Supplementary — not from your PDFRemote desktop sends a computer's screen and audio to a remote user and sends their keyboard and mouse input back. Microsoft RDP (encrypted by default) is the best known, with alternatives such as TeamViewer and VNC. Modern gateways can deliver a desktop inside a web browser using HTML5 and WebSocket, with no client install.
Detailed explanation
PDF p.149-
Remote Access VPN
- Function: Joins user's PC or smartphone to a remote private network via a secure tunnel over a public network.
-
Remote Desktop Access
- Connection Type: Connects to a terminal server on a host using software that transfers shell data.
-
Graphical Remote Access Tool
- Data Transfer: Sends screen and audio data from the remote host to the client.
- Input Transfer: Transfers mouse and keyboard input from the client to the remote host.
-
Microsoft's Remote Desktop Protocol (RDP)
- Use Case: Accesses a physical machine on a one-to-one basis.
- Remote Desktop Gateway: Facilitates access to virtual desktops or individual apps on network servers.
- Encryption: RDP connections are encrypted by default.
-
Alternatives to RDP
- TeamViewer: Supports remote access to various platforms (Windows, macOS, iOS, Linux, Chrome OS, Android).
- Virtual Network Computing (VNC): Implemented by several providers (e.g., RealVNC).
-
Web Browser Clients
- HTML5 VPN: Uses the canvas element to draw and update a desktop with minimal lag, handles audio.
- Clientless Remote Desktop Gateway: Uses WebSocket protocol for bidirectional communication without separate HTTP requests.
Important terms
taken from the text above- Connection Type
- Connects to a terminal server on a host using software that transfers shell data.
- Data Transfer
- Sends screen and audio data from the remote host to the client.
- Input Transfer
- Transfers mouse and keyboard input from the client to the remote host.
- Remote Desktop Gateway
- Facilitates access to virtual desktops or individual apps on network servers.
- Encryption
- RDP connections are encrypted by default.
- TeamViewer
- Supports remote access to various platforms (Windows, macOS, iOS, Linux, Chrome OS, Android).
- Virtual Network Computing (VNC)
- Implemented by several providers (e.g., RealVNC).
- HTML5 VPN
- Uses the canvas element to draw and update a desktop with minimal lag, handles audio.
- Clientless Remote Desktop Gateway
- Uses WebSocket protocol for bidirectional communication without separate HTTP requests.
Examples & real-world scenarios
Supplementary — not from your PDF- An RDP session to an office PC through a Remote Desktop Gateway.
- A browser-based clientless remote desktop portal.
- VNC used to support a Linux workstation.
Scenario
A company exposed RDP directly to the Internet. A safer design puts it behind a VPN or Remote Desktop Gateway with MFA, so the RDP service itself isn't open to everyone.
Common mistakes
Supplementary — not from your PDF- Assuming remote desktop is automatically safe to expose to the Internet.
- Mixing up remote desktop (a GUI session) and SSH (a command line).
Practical skills
Supplementary — not from your PDF- Recommend a secure way to provide remote desktop access.
What I should remember
Key Points PDF p.149-
Remote Access VPN
- Secure Tunnel: Connects user's device to remote network.
-
Remote Desktop Access
- Terminal Server Connection: Transfers shell data.
- Graphical Tool: Screen, audio, mouse, keyboard data transfer.
- RDP: One-to-one physical machine access, encrypted connections.
- Remote Desktop Gateway: Access to virtual desktops/apps.
-
Alternatives to RDP
- TeamViewer: Multi-platform support.
- VNC: Various implementations.
-
Web Browser Clients
- HTML5 VPN: Minimal lag, audio handling.
- WebSocket: Bidirectional communication.