However, the first detected unauthorised access to our network was identified at the Terminal Services server. This terminal server had been installed in February 2020 to facilitate efficient access for trusted external partners and internal IT administrators, as a replacement for the previous remote access system, which had been assessed as being insufficiently secure.Yeah uh, don't have these. And definitely don't have them generally available. Terminal Services, aka "RDP for everyone," are too spicy for most risk appetites.