Writing a Secure RPC Client or Server

This section provides best practice recommendations for writing a secure RPC client or server.

The information in this section applies from Windows 2000 onwards. This section applies to all protocol sequences, including ncalrpc. Developers tend to think ncalrpc is not a probable target for an attack, which is not true on a terminal server where potentially hundreds of users have access to a service, and compromising or even bringing down a service can lead to acquiring extra access.

This section is divided into the following topics:


Additional resources

Documentation

Training

Module

Design solutions for securing server and client endpoints - Training

You learn how to analyze the security requirements for different types of endpoints including servers, clients, IoT, OT, mobile, and embedded devices. These requirements take into account different platforms and operating systems and set standards for endpoint protection, hardening, and configuration.

Certification

Microsoft Certified: Information Security Administrator Associate - Certifications

As an Information Security Administrator, you plan and implement information security of sensitive data by using Microsoft Purview and related services. You’re responsible for mitigating risks by protecting data inside collaboration environments that are managed by Microsoft 365 from internal and external threats and protecting data used by AI services. You also implement information protection, data loss prevention, retention, insider risk management, and manage information security alerts and activities.