Question

1. Explain in details what is Windows RDP?

2.What is RDP default listening port? Explain in depth, why its a bad idea to leave default settings?

3. What is Windows registry? How many hives are in the registry? What are the name of the hives?

4. Are you able to connect to the vitual lab machine via RDP? If you could not connect, explain the reason why in details.

Answer 1

1. Windows RDP( Remote Desktop Protocol)

RDP is introduce by Microsoft, so it is called Windows RDP. With this technique, it is capable to connect a computer running in windows operating system with another computer running in same operating system ie. remotely, within the same network (or) internet. Example: People can work from home, with the contents present in the office computer.

Some of the features and capabilities of RDP:

1. The encryption algorithm used is RSA Security's RC4 cipher: 128 bit encryption.

2. It reduces the bandwidth by data compression, persistent caching of bitmaps, and caching of glyphs and fragments in RAM mechanisms.

3. Unexpected failure in the network leads to disconnection, but not logged off.

4. It helps in Clipboard mapping such as delete, copy, paste etc

5. It helps to print remotely

6. It supports for 8, 15, 16, 24, 32- bit color

2. In order to connect the computers remotely, we need the IP address of the computer and port number. RDP uses the default port number 3389 for both TCP and UDP. .It is possible that another application can use the same default port number unintentionally, it result in preventing RDP from connecting. So it is better to change the port number, select the port number which is free.

The command use to identify the running port is:

netstat -a -o

Except the running port select the free port which range from 1024 to 49151.

3. Windows Registry is also called as Registry, which is a hierarchical database that stores all information about the configuration settings of windows.

There is no fixed hives or keys in a registry.

Some of the hives names are below: The first three are based on hardware and it is common for all registry.

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_CURRENT_CONFIG