[ActiveDir] OT: Possible Security Hole in RDP?

[Dan DeStefano]

I have noticed something with Terminal Services and RDP that is concerning.   I am using a notebook on which I am just a normal user (I do not log on as administrator unless absolutely necessary). I create an RDP connection to a WS2k3 terminal server and choose to make the notebook’s local disks available on the terminal server. I can then browse through my notebook’s hard drive with impunity. I can access all files and folders to which I should not have any access at all, including the administrator profile. However, it does take very long to open these files/folders.   I am sure this is a known issue, I just haven’t read about it anywhere. Does anyone know if there is a way to mitigate this other than setting group policy to not allow local disks to connect to the terminal server?         Dan DeStefano Info-lution Corporation [EMAIL PROTECTED] http://www.info-lution.com Office: 727 546-9143 FAX: 727 541-5888 If you have received this message in error please notify the sender, disregard any content  and remove it from your possession.