Ms licensing for a windows jump server
-
@scottalanmiller This is not recommended, nor supported by MS as well
Thanks for all the ideas and thoughts everyone! -
@kelly said in Ms licensing for a windows jump server:
@scottalanmiller said in Ms licensing for a windows jump server:
@kelly said in Ms licensing for a windows jump server:
You're actually increasing the attack surface of the RDS server by having the accounts local to the server instead of on the AD server.
Because of caching, local is just as secure. Local is actually more secure. But you can run AD locally, making it both AD and local at the same time. While making it not part of the existing AD.
As I understand it, caching stores verifiers rather than the whole of the account.
It's all of the part that matters, though, AFAIK. What part isn't there?
-
@kris_k said in Ms licensing for a windows jump server:
@scottalanmiller This is not recommended, nor supported by MS as well
Thanks for all the ideas and thoughts everyone!But it is "more" supported
