Formula

[pic]

 
[pic]


Using Windows 7 and Windows Server 2008 R2: Controlling Communication with the Internet

Microsoft Corporation
Published: December 2009
 
  

Abstract
This document provides information about the communication that flows between the features in Windows 7 and Windows Server 2008 R2 and sites on the Internet. It describes steps to take to limit, control, orprevent that communication in an organization with many users. This document is designed to assist administrators in planning strategies for deploying and maintaining Windows Server 2008 R2 and Windows 7 in a way that helps provide an appropriate level of security and privacy for an organization’s networked assets.


[pic]


Copyright information

Information in this document, including URLand other Internet Web site references, is subject to change without notice. Unless otherwise noted, the companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted in examples herein are fictitious. No association with any real company, organization, product, domain name, e-mail address, logo, person, place, or event is intended or should beinferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission ofMicrosoft Corporation.
Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.

© 2009Microsoft Corporation. All rights reserved.

Active Directory, ActiveX, Authenticode, DirectX, Internet Explorer, Hyper-V, InPrivate, Microsoft, MSDN, PowerShell, Windows Media, SmartScreen, Windows, Windows Server, Windows Vista are trademarks of the Microsoft group of companies.
All other trademarks are property of their respective owners.


Contents


Using Windows 7 and Windows Server2008 R2: Controlling Communication with the Internet 13

Introduction to Controlling Communication with the Internet in Windows 7 and Windows Server 2008 R2 17
What this document includes 18
Standard computer information sent by Internet-enabled features 18
Types of features covered in this document 18
Types of features not covered in this document 19
Security basics that arebeyond the scope of this document 19
Resources about security basics 20

Active Directory-Related Services and Resulting Internet Communication in Windows Server 2008 R2 21
Benefits and purposes of AD FS and AD RMS 21
Overview of AD FS, federated applications and resulting communication across the Internet 22
Port configurations for AD FS 22
Additional references for AD FS andfederated Web application design 22
Additional references for AD RMS 23

Remote Desktop Gateway and Resulting Internet Communication in Windows Server 2008 R2 24
Benefits and purposes of Remote Desktop Gateway 24
Examples of security-related features in Remote Desktop Gateway 25
Procedure for viewing or changing Group Policy settings that affect Remote Desktop Gateway in Windows Server 2008 R226
Additional references 27

Remote Desktop Licensing and Resulting Internet Communication in Windows Server 2008 R2 28
Purpose of Remote Desktop Licensing 28
Overview: Using Remote Desktop Licensing in a managed environment 28
How Remote Desktop Licensing communicates with Internet sites 29
Controlling Remote Desktop Licensing to limit the flow of information to and from the...