Home > Ask the Security Experts > Identity Management and Access Control Questions & Answers > Is it safe to use remote access tools to grant system access?
Ask The Security Expert: Questions & Answers
EMAIL THIS

Is it safe to use remote access tools to grant system access?

Joel Dubin, past SearchSecurity.com expert EXPERT RESPONSE FROM: Joel Dubin, past SearchSecurity.com expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 05 June 2007
Will using a remote access control product have any effect on Windows file permissions or shares? Does remotely logging on to a server (via a remote access control tool) give users the same rights/permissions as having physical access to the server? Can files on that server be altered?


BROWSE BY TAG
Identity Management and Access Control,   NAC and Endpoint Security Management,   Secure Remote Access,   Enterprise Network Security,   Enterprise Identity and Access Management,   User Authentication Services,   Two-Factor and Multifactor Authentication Strategies,   Expert Archive: Identity Management and Access Control,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Identity Management and Access Control
Learn about enterprise strategy for server virtualization single sign-on
Employee information security awareness training for new IAM systems
Can you combine RFID tag technology with GPS to track stolen goods?
Is there a free enterprise-caliber password-management tool?
Cryptosystem attacks that do not involve obtaining the decryption key
Can any firm or organization get a digital signature certificate?
Should the CTO have domain administrator access?
Does password sharing in international branches violate SOX?
What are best practices for secure password distribution after a data breach?
Is it possible to encrypt CDs and DVDs as well as SD cards?

Secure Remote Access
What security software should be installed on Internet café computers?
Information security book excerpts and reviews
Diverse mobile devices changing security paradigm
Cisco warns of security appliance flaws
How to configure NAP for Windows Server 2008
Can home PCs provide a way for viruses and spyware to enter a corporate LAN?
What are the security risks of opening all the ports on an internal router?
Should an ISP keep corrupted machines off of a network?
As hype subsides, NAC moves ahead
NAC's future

Two-Factor and Multifactor Authentication Strategies
PCI compliance requirement 7: Restrict access
PCI compliance requirement 9: Physical access
Best practices: How to implement and maintain enterprise user roles
Changing times for identity management
RSA researcher Ari Juels: RFID tags may be easily hacked
Apple iPhone app could boost two-factor
CA steers DLP towards access, identity management
PKI and digital certificates: Security, authentication and implementation
Security token and smart card authentication
Enterprise single sign-on: Easing the authentication process

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
authentication  (SearchSecurity.com)
RADIUS  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary


Remote access tools have no effect on Windows file permissions and shares. Users will have the same rights and permissions as if they were physically in front of the machine and, yes, files can be altered.

There are two types of tools for remote access -- software tools and hosted services. Software tools require the application to be installed on both the host and remote computers. These include Symantec Corp.'s pcAnywhere, the open-source RealVNC and Windows Remote Desktop.

Hosted services, on the other hand, are subscription-based. After registering the host computer, the user logs onto the service's Web site to access their host computer from any browser in any location. Since hosted services are Web-based, they don't require the installation of software on the remote computer. Hosted solutions include GoToMyPC and LogMeIn.

The whole point of these tools, whether they are software- or Web-based, is to provide complete system access from multiple locations. For security, hosted services use SSL, and software tools can use various authentication schemes to prevent unauthorized access.

Beyond that, the best advice is to use the same protection for your Windows files and shares as you would if you had physical access to the machine. Set rights and permissions locally on files to the levels you require, and permit access only to approved groups and individuals.

For more information:

  • Learn the best practices for securing remote access endpoints with this five-point strategy.
  • In this Q&A, find out how enterprise single sign can provide authentication for remote logons.




  • Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    Targeted Security Channel Tips for Resellers, Integrators and Consultants
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts