Remote Desktop Protocol Reference
Remote Desktop Protocol Reference
Remote Desktop Protocol (RDP) allows you to connect to a remote Windows computer and interact with its desktop as if you were sitting in front of it. Windows XP Professional includes both the RDP client and server.
Enabling Remote Desktop
- Right-click My Computer → Properties → Remote tab.
- Check Allow users to connect remotely to this computer.
- Click Select Remote Users to grant access to specific accounts (Administrators have access by default).
Connecting with the RDP Client
- Open Remote Desktop Connection (Start → Programs → Accessories → Communications, or run
mstsc.exe). - Enter the computer name or IP address.
- Click Options to configure display, local resources, and performance settings.
- Click Connect and enter your credentials.
RDP Technical Details
| Property | Value |
|---|---|
| Default port | TCP 3389 |
| Encryption | RC4 (40-bit or 128-bit depending on edition) |
| Max color depth | 24-bit (XP SP3 / RDP 5.2) |
| Max resolution | Limited by server display adapter |
| Audio redirection | Supported (RDP 5.1+) |
| Drive redirection | Access local drives from remote session |
| Printer redirection | Print to local printers from remote session |
| Clipboard sharing | Copy/paste between local and remote |
Changing the RDP Port
To change the default port (for security through obscurity):
REM Change RDP port via registry reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v PortNumber /t REG_DWORD /d 3390
Restart the "Terminal Services" service after the change. Connect using mstsc /v:hostname:3390.
RDP Security Best Practices
- Use strong passwords for all accounts with Remote Desktop access
- Enable Network Level Authentication (NLA) on Server 2003+ / Vista+
- Restrict RDP access at the firewall: allow only trusted IP ranges
- Use a VPN for RDP access over the internet
- Enable "Set client connection encryption level" in Group Policy to "High"
- Monitor the Security event log for logon events (Event ID 528, Logon Type 10)
.rdp File
Connection settings can be saved as .rdp files: plain text configuration files:
full address:s:192.168.1.50:3389 username:s:CORP\jsmith screen mode id:i:2 desktopwidth:i:1280 desktopheight:i:1024 session bpp:i:24 redirectdrives:i:1 redirectprinters:i:1 redirectclipboard:i:1 audiomode:i:0