Remote Desktop is an excellent tool for accessing Windows machines across locations. While there have not been many security exploits involving RD, I do not feel comfortable leaving the service directly open to the internet. Also, many corporate internal firewalls restrict outbound traffic to a handful of ports, and in my experience port 3389 which RD runs on is often blocked.

I've come up with a simple method of accessing a Remote Desktop machine over SSH which buys A) Port 3389 is no longer open "to the wild" on the host machine B) If port 3389 is blocked outbound on the client's network, Remote Desktop will still be accessible if the common port 22 (SSH) is available.

At the Readme blog.

[ Read more ]