Security

The recording process of XProtect Screen Recorder is controlled from the computer startup menu and runs in the context of the logged in user. This means that the user can use the Windows Task Manager to shut down the process. To prevent that, Windows must be configured so that the user has no access to Windows Task Manager or other programs with similar capabilities.

Disabling XProtect Screen Recorder results in the device connecting to the XProtect Screen Recorder service showing a red screen with a cross over it.

The TCP based protocol used between the recording server and the computer with XProtect Screen Recorder installed utilizes Digest Authentication (RFC 7616) with SHA256 as a hashing algorithm. The risk of other products intercepting a desktop is therefore minimal, but you are urged to define a password in the Milestone XProtect Screen Recorder- Administrator window.