Archived Guidance: Secure Remote Server Administration
Remote administration should use the least privilege necessary for the task. Protect administrative accounts with strong unique credentials and multi-factor authentication where supported.
Restrict management ports when practical, keep audit logs, maintain recovery access, and avoid disabling existing access until the replacement method has been verified.
