Remote Desktop Services Vulnerability

In response to a new security vulnerability impacting users of Microsoft Windows, the University is taking actions to ensure that our campus network is protected.

Starting Tuesday, May 21, the University will begin requiring all use of Remote Desktop (RDP) from off-campus to first use the campus Virtual Private Network (VPN).  In addition, all computers with older versions of Windows (including Windows XP, Windows 7, Windows 2003 and Windows 2008) should be updated immediately using Windows Update.

Microsoft recently announced a serious software vulnerability impacting Windows users that could lead to a significant disruption of the University’s network if not addressed.

If you have not previously used the University’s VPN, you can download the software and installation instructions at https://cvpn.uchicago.edu/. Additional information is available in the VPN FAQ.

While the use of the VPN will help protect the University’s network, complete protection requires computers to be updated with the latest software updates, preferably through Windows Update. Microsoft has updates available for vulnerable versions of Windows (including Windows XP, Windows 7, Windows 2003 and Windows 2008). Local IT staff are available to assist with assessing and updating Windows computers.

We encourage users of RDP to download the VPN client and begin using it as soon as possible.