Guide to Remote Desktop Connection Properties for Secure Access

Since the COVID-19 pandemic, remote work has become the new norm. One of the key technologies enabling people to work effectively from home is Microsoft’s Remote Desktop Protocol (RDP). Here is a guide Guide to Remote Desktop Connection Properties for Secure Access. Please see how to determine why an MBAM-protected device is non-compliant, and an article on “Is RDP enabled? Enable and disable Remote Desktop in Windows 10 for all users or selected users“.

Note: You can use Remote Desktop on your Mac, Windows, Android, or iOS device to connect to a Windows PC from virtually any location. I will recommend to you to visit the Microsoft Learn for more connection options.

You can also connect to remote desktops and apps using third-party tools or the Windows Remote Desktop app. The Windows app combines resources from Remote Desktop Services, remote PC connections, Azure Virtual Desktop, Windows 365, and Microsoft Dev Box to provide a seamless experience.

According to Microsoft, starting March 27, 2026, the Remote Desktop client for Windows (MSI) will no longer be supported. Users should begin migrating to Windows App to ensure continued access to their Azure Virtual Desktop and Windows 365 resources after this date.

Starting May 27, 2025, the Remote Desktop app for Windows from the Microsoft Store will no longer be supported or available for download and installation. Users must transition to Windows App to ensure continued access to Windows 365, Azure Virtual Desktop, and Microsoft Dev Box.

Also, see how to Disable credential Prompts for Remote Desktop Connections, how to fix Remote Desktop can’t connect to the remote computer for one of these reasons, and “RDP Configuration Settings: Connect automatically to RDP session”.

Essential RDP Connection Properties Every Remote User Should Know

Windows Remote Desktop has traditionally relied on local network connections. Most users who access their workstations or office environments via RDP first connect through a VPN or a bastion host. As a result, the stability of an RDP session depends on both the reliability of the VPN connection and the performance of the RDP link itself.

First, decide whether to use the Windows App or the Remote Desktop client for Windows (MSI) to connect to Remote Desktop Services. The Windows App will replace the Remote Desktop client and is available on all platforms.

Windows App is the new way to connect all of your cloud and remote resources and replaces the Remote Desktop client. 

Upon download, you will be required to sign in.

However, since the Windows App does not yet support connecting to Remote Desktop Services on all platforms at the time of writing this guide. You may still need to use the Remote Desktop client in some cases. Because of this, I would like to discuss the Remote Desktop connection Properties.

Platform	Windows App	Remote Desktop client
Windows	No	Yes
macOS	Yes	Yes
iOS/iPadOS	Yes	Yes
Android	Yes	Yes
Web browser	No	Yes

Please, see “Remote Desktop cannot find the computer this in the specified network: Verify the computer name and domain that you are trying to connect, how to change the default user password in PostgreSQL, and how to upgrade PostgreSQL Engine used by VBR.

The General Tab

The General tab is where you configure the basic connection settings for your RDP session as shown below. It includes options for specifying the remote device and user name. Here you also have the option of saving/loading RDP session profiles.

Here you can either specify the hostname or IP address of the remote Windows PC you want to connect. Also do not forget to specify the UPN or sAM account for the username when logging into the remote system.

Note: If the above field is left blank, you’ll be prompted at connection time.

When the “Allow me to save credential” is checked. This will enable you to save your username and password so you don’t have to enter them each time. Below are the information regarding the rest connection settings.

• Save As: Save the current connection settings as a .rdp file, which you can reuse later.
• Open: Loads an existing .rdp file with pre-configured settings.
• Delete: Removes saved credentials or previous session data (from Windows Credential Manager).

Please, see how to protect Remote Desktop credentials with Windows Defender Remote Credential Guard or Restricted Admin Mode, and how to enable or disable Reputation-Based Protection on Windows 10 and Windows 11.

Display Tab

The Display tab allows you to control how the remote desktop session appears on your local screen. This settings affect screen resolution, color depth, and multi-monitor use.

The following describes each of the options available in the Display tab.

• Display Configuration: This is used to control the size of your Remote Desktop display. You can move the slider to the left or all the way to the right depending on the screen mode or display size you want the remote computer to display in.
• Use all my monitors for the Remote Session: If your computer has more than one monitor, select the check box to use all all your monitor for the remote session. But if you want to open Remote Desktop in full-screen mode on just one monitor, leave the box unchecked.
• Color Depth of the Remote Session: You can use the dropdown list to select the color quality of the remote desktop. Reducing the color depth will help performance.
• Display the connection bar when I use the full screen: The connection bar is a thin bar at the top of the screen that enables you to switch back to normal window mode.If you unchecking the box, you will have to use Ctrl+Alt+Break to switch between full-screen and window mode.

Setting the Local Resources options

The following describes each of the options available in the Local Resources tab.

• Remote Audio: When you want to control where audio is played during a remote session, click the Settings button under the Remote Audio section. You can choose to play audio on the local computer, the remote computer, or disable audio entirely. Additionally, the settings allow you to enable or disable audio recording during remote sessions.
• Keyboard: The apply windows key combinations: This enables you to specify how windows keyboard shortcuts are to be interpreted. On the remote computer, on the local computer, or on the remote computer only when it is running in full screen mode.
• Local Devices and Resources: The printers checkbox lets you access local printers from the remote session.
• The clipboard checkbox synchronizes the local and remote clipboard. When an information or content is copied from the local computer, it can be pasted on the remote session (or vice versa).

Setting the Experience options

The following describes each of the options available in the Experience tab.

• Choose Your Connection Speed to Optimize Performance: This option enables you to optimize the amount of information sent back and forth over the network based on your expected connection speed. At slower speeds, features such as the desktop background, font smoothing, window animations, and so on will be suppressed. The default setting is to let Windows choose which feature to use based on the actual speed of the connection.
• Persistent Bitmap Caching: If you select this box, copies of bitmap images are stored on the local computer so they don’t have to be transferred across the network every time they are needed.
• Reconnect if the connection is dropped: If this box is selected, connection will be automatically reestablished if the connection is broken.

Setting the Advanced options

The following describes each of the options available in the Advanced tab.

• Server Authentication: Determines what to do if an authentication problem such as an unknown security certificate is encountered when connecting to the server. The default action is to warn the user, but enables the user to continue if desired. You can change this setting to always connect in spite of the authentication problem, or to never connect when a problem is encountered.
• Connect from Anywhere: These settings are used only when you wish to use an advanced server role called Remote Desktop Gateway to manage remote access to computers on your network.

Please, see how to allow saved credentials for RDP connection, and GPUpdate switches – GPUpdate vs GPUpdate /force.

Enable Remote Desktop connections on Windows

To connect to another Windows PC or server using RDP, first enable Remote Desktop on the remote machine. Fortunately, Windows makes it easy to configure and activate Remote Desktop.

On client PCs

Click the Start button, then press the Settings icon. From here, press System and then on Remote Desktop. Press the Enable Remote Desktop slider to move it to the On position. The slider will turn blue when Remote Desktop has been enabled.

By default, Windows uses the Microsoft account you sign in with to establish Remote Desktop connections. To grant remote access to additional users, click “Select users that can remotely access this PC.” In the Remote Desktop Users window, click “Add,” then search for and select the user account you want to grant access to.

If you want to enable Remote Desktop connections over the internet, you must allow incoming and outgoing traffic on TCP and UDP port 3389 through your network firewall, unless you have port forwarding set up on your router.

On Servers

To do this for servers, Open Server Manager, click Start, then select Server Manager, or open it from the taskbar and navigate to “Local Server”.

In the left-hand pane, click “Local Server.” Locate the Remote Desktop Setting. In the Properties section, find Remote Desktop. This is “Disabled” by default. Click on “Disabled” link next to Remote Desktop.

In the System Properties window that appears, select “Allow remote connections to this computer.”

Optionally, check “Allow connections only from computers running Remote Desktop with Network Level Authentication (recommended)”. But if legacy clients need to connect as well, please uncheck it.

Confirm Firewall Exceptions when prompted, and click OK to allow the necessary firewall rules for Remote Desktop. Next, Apply and click on Close The status in Server Manager will update to “Enabled” as shown above.

See the following guides: How to remove saved RDP credentials entries in Windows 10. How to remove entries histories from the Remote Desktop Connection, and how to prevent the saving of Remote Desktop Credentials in Windows

Steps to secure RDP Connection

Remote Desktop Protocol (RDP) can be a valuable tool, but can also introduces security risks. Especially when exposed over the internet. Port 3389 is a well-known target by attackers, so it’s crucial to secure your RDP setup.

Avoid Open Internet Access: Never expose RDP directly to the internet. Instead, set up a VPN, use an RD Gateway to create a secure tunnel into your local network or connect via Bastion.

Enable Network Level Authentication (NLA): NLA ensures only authenticated users can initiate a session. This is enabled by default on Windows.

Restrict Access to Standard Users: Allow only non-administrator accounts to use RDP. This limits what a compromised user account can do. But in a restricted and monitored environment, you can also grant administrative rights.

Limit Failed Login Attempts: Configure account lockout policies to prevent brute-force attacks. Do not forget to implement MFA for your RDP

Use Strong, Unique Passwords: Avoid password reuse and utilize long, complex passwords with a mix of letters, numbers, and symbols.

Force Maximum Encryption: Use Group Policy to set RDP encryption to “High Level” to ensure secure communication:

Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security > Set client connection encryption level > Enabled > High Level

I hope you found this guide to Remote Desktop Connection Properties for Secure Access very useful. Please feel free to leave a comment below.