Allow .rdp files from valid publishers and user's default .rdp settings

Supported OS tags: WindowsVista

This policy setting allows you to specify whether users can run Remote Desktop Protocol (.rdp) files from a publisher that signed the file with a valid certificate. A valid certificate is one that is issued by an authority recognized by the client, such as the issuers in the client's Third-Party Root Certification Authorities certificate store. This policy setting also controls whether the user can start an RDP session by using default .rdp settings (for example, when a user directly opens the Remote Desktop Connection [RDC] client without specifying an .rdp file). If you enable or do not configure this policy setting, users can run .rdp files that are signed with a valid certificate. Users can also start an RDP session with default .rdp settings by directly opening the RDC client. When a user starts an RDP session, the user is asked to confirm whether they want to connect. If you disable this policy setting, users cannot run .rdp files that are signed with a valid certificate. Additionally, users cannot start an RDP session by directly opening the RDC client and specifying the remote computer name. When a user tries to start an RDP session, the user receives a message that the publisher has been blocked. Note: You can define this policy setting in the Computer Configuration node or in the User Configuration node. If you configure this policy setting for the computer, all users on the computer are affected.

This policy has no additional user input fields.

• Computer
  Allow .rdp files from unknown publishers

  At least Windows Vista with Service Pack 1
• User
  Allow .rdp files from unknown publishers

  At least Windows Vista with Service Pack 1
• User
  Allow .rdp files from valid publishers and user's default .rdp settings

  At least Windows Vista with Service Pack 1
• Computer
  Configure server authentication for client

  At least Windows Vista with Service Pack 1
• Computer
  Disable Cloud Clipboard integration for server-to-client data transfer

  At least Windows 11 Version 22H2
• Computer
  Do not allow hardware accelerated decoding

  At least Windows Server 2016, Windows 10
• User
  Do not allow passwords to be saved

  At least Windows Server 2003 operating systems with SP1 or Windows XP Professional with SP2
• Computer
  Do not allow passwords to be saved

  At least Windows Server 2003 operating systems with SP1 or Windows XP Professional with SP2
• Computer
  Prompt for credentials on the client computer

  At least Windows Vista with Service Pack 1
• Computer
  Specify SHA1 thumbprints of certificates representing trusted .rdp publishers

  At least Windows Vista with Service Pack 1
• User
  Specify SHA1 thumbprints of certificates representing trusted .rdp publishers

  At least Windows Vista with Service Pack 1
• Computer
  Turn Off UDP On Client

  At least Windows 8 or Windows RT