Terminal Services
Hi, newbie please be gentle
can I ask, clock, why on this earth you want to open an unsecured standard port giving god knows who almost un-fettered access to your entire network??
surely there is/are better way(s) to do this
1) firewall port change - so incoming 1234 goes to 3389, less obvious to a hacker
2) VPN - secure traffic then ALL ports are open, but only to approved connections
I appreciate what you are trying to do, and MicroSnot love giving us these things but opening a standard port, of which there are many many documented attacks is surely asking for an increase in overtime budget !
Believe me, choosing an alternative, even as simple as mapping a different user definable port at firewall level to 3389 is preferable, as any hacker hitting this port won't know what it is and is likely to leave it alone or run the wrongs checks at it
Better still is dedicated firewall / VPN accelerator so all incoming connections are barred ( unless you open SMTP etc ) to all but approved connections
Been there done that, just trying to share my own exoeriences
Regards

Sis