讓 Windows XP SP3 遠端桌面連線支援網路層級驗證

Microsoft 從 Windows Vista 之後的作業系統開始支援「網路層級驗證」(Network Level Authentication, NLA)，這是一種新的驗證方法，讓您在建立完整的遠端桌面連線之登入畫面出現之前，就先行完成使用者的驗證程序。 這種驗證方式比起之前的安全多了，可以讓遠端電腦不受駭客與惡意軟體的荼毒。具體而言，「網路層級驗證」的優點如下所列：

• 遠端電腦在驗證使用者時，僅需要耗用較少的資源進行驗證，無需像之前的版本，必須啟動完整的遠端桌面連線才能進行驗證。
• 降低阻斷服務攻擊（DoS）的風險，進而提供更高的安全性。
• 由於使用遠端電腦進行驗證，所以能夠避免使用者連線到專為惡意用途而設定的遠端電腦。

既然網路層級驗證功能這麼好，那要如何確認所使用的遠端桌面連線程式否具備網路層級驗證的功能呢？

1. 依序按下「開始」按鈕、「所有程式」、「附屬應用程式」、「遠端桌面連線」。
   或是
   直接按下鍵盤上的 Win + R 、在「開啟」欄位中鍵入
   
   mstsc
   
2. 按下「遠端桌面連線」對話方塊左上角的圖示，接著再按下「關於」指令。
3. 請在「關於遠端桌面連線」對話方塊中，尋找是否有「支援網路層級驗證」的文字。
   
4. 如果有，恭喜您表示您的遠端桌面連線支援網路層級驗證。如果沒有，且作業系統為 Windows XP SP3，請按照下面的步驟進行。
   
   

開啟 Windows XP SP3 網路層級驗證的操作步驟：

1. 開啟「登錄編輯程式」（regedit.exe）。
2. 找到下面的機碼位置，如圖加入一個新的值：
   
3. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages 新增 tspkg
4. 找到下面的機碼位置，如圖加入一個新的值：
   
5. \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SecurityProviders 新增 credssp.dll
6. 重新執行一次遠端桌面連線，確認是否修改成功。

10 Remote Desktop Access Apps for Enhanced Client Support

This week, I』ve written a few posts on providing virtual training and support for clients and some of the tools you can use to do that.

Yesterday, I shared a list of 30 screen capture tools that can make training and support a quicker and more productive activity for both you and your clients. Today, I』m focusing on 10 applications that allow you to access your client』s computer remotely.

Anyplace Control

Anyplace Control provides secure remote access over a LAN, WAN or Internet connection. Features include file transfer, remote power management, double password protection and remote access alert. There are three licensing options based on the number of connections needed.

Apple Remote Desktop 3

Apple Remote Desktop for Mac OS X provides remote access to other Mac computers. Features include searches across multiple systems, more than 40 Automator actions, a Dashboard widget, and user history and reporting. For remote support functions, you can use the Remote Drag-and-Drop copy function to copy and paste between local and remote systems. The software includes access to 10 managed systems.

BeAnywhere

BeAnywhere provides access to see and control a remote computer with your browser. Features include the ability share, transfer and sync files, guest access, and universal networking. BeAnywhere is priced per computer.

GoToMyPC

GoToMyPC allows you to remotely access a Mac or PC from any web browser in real time. Features include automatic setup, 128-bit AES encryption, remote printing, file sync and transfer, and sound. Several monthly plans are available.

LogMeIn

LogMeIn lets you connect to remote computers from any Internet-connected web browser. Features include file transfer, file sharing, remote to local printing, remote to local audio, diagnostic toolkit, alerting and monitoring, and advanced reporting and analysis. Account fees based on the number of computer connections.

RealVNC

RealVNC provides remote control software with features including Mac OS X access (Enterprise edition), server authentication and 128-bit AES session encryption, printing functionality, file transfer, integrated address book and chat. RealVNC provides both free and paid licensing options.

ShowMyPC

ShowMyPC provides desktop sharing and remote PC access. Features include integration with your web site, chat and white board, desktop and audio recording, file and application sharing, and integrated Mac and Linux support. There are several subscription plans available.

SkyFex

SkyFex is a remote support solution that allows desktop sharing and remote desktop control. Features include 128-bit encryption, no software installation required, and firewall/proxy transparent. Free and paid plans available.

TeamViewer

TeamViewer lets you establish instant connections to any computer over the Internet over an AES (256 Bit) encoded session, and includes features such as integrated file transfer, browser-based access, and optimized display quality. The service is free for non-commerical users and has several licensing options for business accounts.

UltraVNC

UltraVNC is software that provides access and control of another Windows machine from a remote location. Features include data encryption, chat functionality and file transfer. The software is free under the GNU General Public License.

Another special tool is http://www.crossloop.com/