Are you worried about privacy leakage when using Remote Desktop Connection to remotely control another computer? Don’t worry, here in this post, we’ll guide you through how to secure Remote Desktop on Windows 10, 11.
For some reason, my company decided to let 80% of its employees handle official business long-distance and I am one of them. We’re recommended to use Remote Desktop to remotely access our office computers and get the resources we need. I didn’t know much about Remote Desktop before, but remote control sounds a little scary to me. How can I configure Remote Desktop on Windows 10in order to achieve maximum security?”
- Question from Reddit
Remote Desktop (also known as RDP) is a relatively safe remote desktop tool developed by Microsoft. While it boasts strength, there are vulnerabilities to consider, such as the notable risk of a Man-in-the-Middle (MITM) attack. Though security challenges exist, adopting preventive measures can help minimize these risks.
After configuring Remote Desktop correctly, you can optimize Windows 10 Remote Desktop security with four available options for both Windows 10 and 11.
Let's start with the most obvious one. All of the users that you gave Remote Desktop access need to have strong passwords. Use more than eight characters (12+ is recommended) with numbers, lowercase and uppercase letters, and special characters.
You’re recommended to remove the existing users and groups that have permission to log on as a Remote Desktop Services client and manually add the users you’d like to grant Remote Desktop access to. This isn’t an essential step, but it gives you more power over which accounts get to use Remote Desktop.
Step 1. Press Win + R to open the Run dialog box, type in “secpol.msc” and click OK.
Step 2. Navigate here: Local Policies > User Rights Assignment > Allow log on through Remote Desktop Services.
Step 3. Remove Administrators and Remote Desktop Users (or any other users or groups on your own computer) listed in this window.
Step 4. After that, click Add User or Group and manually add the users you’d like to grant Remote Desktop access to.
You may also need to change some default Remote Desktop Services Security settings to achieve maximum security.
Step 1. Open the Run dialog box, type in “gpedit.msc” and click OK.
Step 2. Navigate here: Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security. On the right pane, you’ll see multiple settings.
Step 3. Find Set client connection encryption level on the right pane. Change its status to Enabled. Then set the Encryption level from the drop-down list to High Level.
Step 4. Find Require secure RPC communication on the right pane. Change its status to Enabled.
Step 5. Find Require use of specific security layer for remote (RDP) connections on the right pane. Change its status to Enabled. Set the RDP security layer to SSL from the drop-down list.
Step 6. Find Require user authentication for remote connections by using Network Level Authentication on the right pane. Change its status to Enabled.
By default, Remote Desktop listens on port 3389. But the default port number can be hacked anytime. Therefore, changing the default RDP port number can be a good way to safeguard the Remote Desktop.
Step 1. Open the Run dialog box, type in “regedit” and click OK.
Step 2. Navigate here: HKEY_LOCAL_MACHINE > System > CurrentControlSet > Control > Terminal Server > WinStations > RDP-Tcp. Scroll down and find PortNumber and then double click on it.
Step 3. Change the port number you like, such as 3390, and then select Decimal. Click on OK.
For fortified protection against RDP vulnerabilities, users seek a comprehensive solution for remote access. Enter AnyViewer, a resilient remote desktop software that stands as the free, secure alternative to RDP. Its security measures encompass:
Beyond its robust security features, AnyViewer boasts numerous advantages compared to Remote Desktop. Notably, it excels in user-friendliness, proving easy to set up and navigate. Follow the steps below to initiate a swift and hassle-free start:
Step 1. Download, install, and launch AnyViewer on both computers.
Step 2. Go to Log in, and then click Sign up. (If you already have signed up on its official website, you can log in directly.)
Step 3. Fill in the signup information.
Step 4. Then you can see you successfully logged in to AnyViewer. Your device will automatically be assigned to the account you've logged in to.
Step 5. Log in to the same AnyViewer account on the two devices, then click One-click control to achieve unattended remote access.
This post primarily offers four ways of how to secure Remote Desktop on Windows 10, 11. Configuring all settings ensures a more secure Remote Desktop Connection. Alternatively, opt for the secure RDP alternative, AnyViewer, which guarantees safety through Elliptic Curve Cryptography (ECC) encryption. With features such as a One-click connection and privacy mode, AnyViewer goes the extra mile in safeguarding user privacy.