How to kill or prevent RDP connection attempts

hi, im getting multiple rdp onnection attempts, whether or not actual rdp connections not sure, like, when im getting conection other me, kill it. ive tried in cmd qwinsta /server:servername , rwinsta /server:servername sessionid kill doesnt kill it. im using microsoft network monitor monitor traffic , can see connection attempts scrolling (or active connections, scary! has payoad of 0 when connected!) ablse set rule shut down rdp 10 minutes after many failed authentications attempts? under security policys? im not familiar policys. in advance!!

what suggest in case creating custom script deny rdp connections source address. create new scheduled task run @ logon , assign trigger event log tells there failed connection attempt. every time event occurs, custom script run denying rdp source mentioned in script.

question:

do access rdp directly on internet? maybe on different port? easy target amateur port scanning software. suggest buy router vpn capapilities linksys rv042 , connect via vpn.

also consider using nap (network access  policy) ts gateway

http://technet.microsoft.com/en-us/library/cc732172(ws.10).aspx

or @ least use rdp on ssl.

http://technet.microsoft.com/en-us/library/cc782610(ws.10).aspx

---

please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread.

Windows Server  >  Windows Server General Forum