Can RDP clients launch remote applications and not desktops

“alternate shell” doesn’t seem to work anymore in recent versions of Windows, RemoteApp is the way to go. remoteapplicationmode:i:1 remoteapplicationname:s:Purpose of the app shown to user… remoteapplicationprogram:s:C:\…\some.exe remoteapplicationcmdline:s: To get this to work under e.g. Windows 10 Professional, one needs to enable some policy: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services] “fAllowUnlistedRemotePrograms”=dword:00000001

Import RDP file into Microsoft Remote Desktop Connection Manager 2.7

I’m not aware that you can import separate .rdp files however as .rdp files are readable as text files. A simple powershell script should do the job: $Path = “C:\Import into RDCMan” $Text = “full address:s:” $PathArray = @() $File = “” $String = “” $FinalString = “” Get-ChildItem $Path -Filter “*.rdp” | Where-Object { … Read more

Is there a replacement for the removed “Windows System Resource Manager” feature in the Windows Server 2012 R2 release?

So we’re left with “Fair Share” resource sharing, enabled by default for Remote Desktop Services in 2012+, for CPU, Network, and Disk I/O. But not memory. So no, no memory balancing like we had with WSRM. Why did they specifically leave memory out of the FairShare policies? I don’t know. You can implement fair sharing … Read more

How to disable TLS 1.0 in Windows 2012 RDP

Disabling TLS is a system-wide registry setting: https://technet.microsoft.com/en-us/library/dn786418.aspx#BKMK_SchannelTR_TLS10 Key: HKLM SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server Value: Enabled Value type: REG_DWORD Value Data: 0 Also, the PCI requirement for disabling early TLS does not go into effect until June 30, 2016. Internet Explorer is one product I know of that has a separate configuration option for the TLS/SSL encryption … Read more

Allow RDP for user from commandline

Sure, you can use the NET command: NET LOCALGROUP “Remote Desktop Users” domain\jscott /ADD This would add the domain user domian\jscott to the local group Remote Desktop Users. If you’d like to add a non-domain user, simply leave off the domain prefix: NET LOCALGROUP “Remote Desktop Users” keyoke /ADD This would add the local user … Read more

How to enable the 2 concurrent (+1 console) sessions on Windows Server 2012

There is no more /console RDP switch since Windows Vista. Yes, the Remote Desktop Services mmc snapins that you were used to in 2008 have been removed. A Windows license grants you two “administrative” simultaneous remote desktop sessions before you need to install the Remote Desktop Services role with CALs. There is no “2 administrative … Read more