Hi all,
I am seeking thoughts/recomendations & experiences in regards to using Temviewer for remote access to your servers. Is it secure enough or do you have a better suggestion?
thanks
Judy
10 Spice ups
tobywells
(toby wells)
2
We RDP so we know who was logging in, but generally discourage direct server connections. Virtually everything can be achieved with RSAT, Server Admin etc
3 Spice ups
I also use VPN for my clients. I see a lot of software companies that use Teamviewer though. No problems that I’m aware of.
2 Spice ups
inkmaster
(InkMaster)
5
WE use VPN or Pertino and RDP for servers. For users and remote users we use Teamviewer.
The servers also have iLo cards that can be used in an emergency.
1 Spice up
VPN then RDP. I use TeamViewer for remote support but am against leaving it on 24/7 on servers.
6 Spice ups
smooney
(S.Lee)
7
Ive got it just on my work PC, and then RSAT or do anything that needs working on.
Teamviewer is fine so long as you set it up properly and you use more than just teamviewers security settings. For example, you may need to allow your 3rd party full time access to a particular server from the outside. If not using vpn and just teamviewer then:
-
Setup teamviewer security to allow whitelist teamviewer accounts only ie ur 3rd party teamviewer id’s.
-
if they never require out of hours access then set confirmation only.
-
on your firewall, create an address/object for their public ip address. And from the untrust to trust, set a policy that permits access from that address to your server, with port 443 only as that will force teamviewer to use 443. Then set a deny all policy after that, from untrust to trust to that server. Enable logging on that policy.
-
You can also enable screen recordings if you want to go that far.
So teamviewer on its own, ur placing too much trust with teamviewer’s security which you have little control over. With the above method, u gain back an element of control.
Next thing you need to be careful of is inter server communication. So if this 3rd party has access to this server you want to make sure they cant contact other servers. Place this server on a different vlan and put ur acl’s around that.
Security is all about the controls you have in place and what control you have over those controls.
2 Spice ups
da-schmoo
(Da_Schmoo)
9
Why pay for something when RDP+VPN is free? or virtually free depending on how you do VPN.
1 Spice up
Thanks all for those great responses, I will investigate these other options.
Thanks Keg also for your clarification on the extra security required for Teamviewer…
jocel2
(enjoyjocel)
11
I wouldn’t use TV for our Servers. Its hard to risk. VPN then RDP best way to go.
1 Spice up
I use Teamviewer to connect to a domain joined workstation and login with a regular user account. From there I use normal tools, for example RDP to connect to our servers. I manage our workstations with Teamviewer but have not installed it on any of our servers.
markmoyer
(Mark M.)
13
Nice reply, Keg, you gave me a couple of things to take into consideration with regards to our use of TV.
clauswrtz
(clauswrtz)
14
I use http://anydesk.com - its free and very easy to use.
I think combine TaemViewer and LiteManager is better. LiteManager includes FTP, remote taskmanager, power management, remote regedit and etc. LiteManager remote access
You may also be interested using Lepide remote admin tool that is available free and provides the option manage the entire networks remotely without having any interruption.
If you are looking for a hybrid solution for remote support AND unattended access, you might want to take a look at Remote Utilities. As for security - all data is RSA-AES encrypted and there are multiple authorization options.

You may also want to consider Techinline as a possible solution for your remote access needs. It works only through secure SSL and HTTPS channels. You can find more information about the security aspect on the following page: Why FixMe.IT - Remote Support Software by Techinline
I’m also available at your convenience to better introduce you to Techinline or set you up with a fully-featured trial account.