Restrict RDP Access by IP in Server 2003 (SP1)

Question

We have a product in our environment that is a virtual machine, running Windows Server 2003, standard edition (SP 1). Due to the vulnerabilites, our security group is requesting that I limit RDP access by specific IP.

I'm having trouble finding and enabling this capability, is there actually a way to restrict RDP access only by IP?

Answer 1

This sounds like a job for Windows 2003's IP Security Policy Management feature. CodeHill has a good tutorial. So does Managed.com.

Highlights:

• Start mmc.exe and add the IP Security Policy Management snap-in.
• Right-click on IP Security Policies on Local Computer. Select Create IP Security Policy....
• Follow the wizard.

There is also a command-line version -- IPSecCmd.exe.

Another good tutorial: http://winhosts.blogspot.com/2012/09/set-up-ip-security-policy-rule-for.html

Answer 2

Server 2003 SP1 already has the Windows Firewall built in.

1. Run firewall.cpl or go _Control Panel → Windows Firewall`
2. In the exception list, select "Remote Desktop" and click 'Edit'
3. Click 'Change Scope', then enter a comma-separated list custom IP addresses, or address/netmask pairs, or CIDR address/plen pairs.