Windows RDP / Terminal Services Detection

Info

Synopsis

The remote host is running Terminal Services or Remote Desktop Protocol (RDP).

Description

The remote host is running Terminal Services or Remote Desktop Protocol (RDP). This protocol is used to manage remote servers and is installed, by default, on Windows XP Systems. An attacker can use this port to brute force the user accounts present on the server.

Solution

Ensure that RDP is required for the machine in question.