Remote Access Management
Home > Ask the Security Experts > Identity Management and Access Control Questions & Answers > Is it safe to use remote access tools to grant system access?
Ask The Security Expert: Questions & Answers
EMAIL THIS

Is it safe to use remote access tools to grant system access?

Joel Dubin EXPERT RESPONSE FROM: Joel Dubin

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 05 June 2007
Will using a remote access control product have any effect on Windows file permissions or shares? Does remotely logging on to a server (via a remote access control tool) give users the same rights/permissions as having physical access to the server? Can files on that server be altered?

>
EXPERT RESPONSE
Remote access tools have no effect on Windows file permissions and shares. Users will have the same rights and permissions as if they were physically in front of the machine and, yes, files can be altered.

There are two types of tools for remote access -- software tools and hosted services. Software tools require the application to be installed on both the host and remote computers. These include Symantec Corp.'s pcAnywhere, the open-source RealVNC and Windows Remote Desktop.

Hosted services, on the other hand, are subscription-based. After registering the host computer, the user logs onto the service's Web site to access their host computer from any browser in any location. Since hosted services are Web-based, they don't require the installation of software on the remote computer. Hosted solutions include GoToMyPC and LogMeIn.

The whole point of these tools, whether they are software- or Web-based, is to provide complete system access from multiple locations. For security, hosted services use SSL, and software tools can use various authentication schemes to prevent unauthorized access.

Beyond that, the best advice is to use the same protection for your Windows files and shares as you would if you had physical access to the machine. Set rights and permissions locally on files to the levels you require, and permit access only to approved groups and individuals.

For more information:

  • Learn the best practices for securing remote access endpoints with this five-point strategy.
  • In this Q&A, find out how enterprise single sign can provide authentication for remote logons.


  • Sound Off! -   Be the first to post a message to Sound Off!


    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


    RELATED CONTENT
    Identity Management and Access Control
    CardSpace vs. user IDs and passwords
    Biometrics vs. biostatistics
    What are the dangers of using radio frequency identification (RFID) tags?
    What are the risks of connecting a Web service to an external system via SSL?
    What should an internal support model for identity management look like?
    What precautions should be taken if biometric data is compromised?
    How to choose the right biometric security product
    How to prevent hackers from accessing your router security password
    How does identity propagation work?
    Is it secure to use .NET membership class for user authentication?

    Remote Access Management
    Information security book excerpts and reviews
    Partner access: Balancing security and availability
    Cisco injects role-based access control into the network
    What are the dangers of Web-based remote access systems?
    NAC switches, appliances help track users, malware
    Microsoft NAP-TNC compatibility won't speed adoption, users say
    Inviting Risk
    Secure Remote Access
    Emerging Technologies
    How to set up a managed unified threat management remote firewall/VPN appliance

    Two-Factor and Multifactor Authentication Strategy
    Address Authentication and Transaction Validation Protocols to Stem Identity Theft
    Understanding multifactor authentication features in IAM suites
    SaaS Offering Handles SSO
    Identity Management Suites Enable Integration, Interoperability
    Product review: Secure Computing SafeWord 2008
    Keystroke recognition aids online authentication at credit union
    Fraudsters exploiting multiple financial services channels
    Video: Changes ahead for MIT Kerberos Consortium
    Kerberos security evolves for B2B, mobile tech
    Kerberos: Authentication with some drawbacks

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    authentication  (SearchSecurity.com)
    RADIUS  (SearchSecurity.com)
    remote access  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice

    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineWebcastsWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




    All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts