title: PCI compliance: using SSL as transport layer for RDP (Terminal Service)
body: <p>My client failed her PCI compliance audit.  The server supports Remote Desktop (Terminal Service) but only provides encryption and not authentication.  This exposes the server to Man-In-The-Middle attacks.</p>
  
  <p>The supposed solution is to force SSL as the transport layer for RDP.</p>
  
  <p>Anyone know how to do this?</p>
  
  <p>The server runs Windows 2003.</p>