Windows servers can be managed both locally (on-site) and remotely (from a different location). Starting with Windows Server 2016, remote management is turned on by default. This allows you to manage the server from afar using tools like Server Manager.

The server has built-in features for hardware management, such as checking and controlling hardware using a special service and protocol called WS-Management. Additionally, you can create programs that communicate with the server remotely using this protocol, making it easier to monitor and manage the server's hardware.

The main components used for remote management of Windows and Windows servers are the following:

• Remote Desktop Protocol (RDP)
• Windows Remote Management (WinRM)
• Windows Management Instrumentation (WMI)

RDP

• TCP or UDP Port 3389

Footprinting the Service

• nmap -sV -sC 10.129.201.248 -p3389 --script rdp*
• nmap -sV -sC 10.129.201.248 -p3389 --packet-trace --disable-arp-ping -n

A Perl script named rdp-sec-check.pl has also been developed by Cisco CX Security Labs that can unauthentically identify the security settings of RDP servers based on the handshakes.

RDP Security Check - Installation

• sudo cpan
• git clone <https://github.com/CiscoCXSecurity/rdp-sec-check.git> && cd rdp-sec-check
• ./rdp-sec-check.pl 10.129.201.248