Blocked RDP connection no longer blocked after network disconnected

Question

If you lock an RDP connection and then disconnect and reconnect the Internet connection, you can use the RDP session without entering the password.

Should this be the case? Is there a way to prevent this?

I have already set the setting that no automatic connection attempt should happen after a disconnection, but I would be open for a better solution.

With kind regards
F.L.

Answer 1

Hi,

You can also configure below policies.

On RDS session host server
Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security
Enable "Always prompt for password upon connection"

On Client
Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Connection Client
Enable " Do not allow passwords to be saved"

Thanks,

Eleven

If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

Answer 2

Hi

The session is restored by the local Remote Desktop Client, as it cached the session / credential, in it's attemps to restore the session.

You can't use without password the same session from another computer. To restore the disconnected session from another computer the user need to enter the credential again.

To prevent what you see you could set a disconnection close setting, so the session would close on the remote server when the session fall disconnected.

The settings is there in Group Policy (gpedits.msc);

Computer Configuration, Admin Templates, Windows Components, Remote Desktop Services, Remote Desktop Session Host, Session Time Limits.

Thanks

Answer 3

Thank you guys, i think the Answer of ElevenYu-MSFT is a good choice :)