Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I use RDP on Windows 7 (SP1) to connect to Windows Server 2008. There is no SSL I have setup on the server yet which I will do. Before that I just wondering if the connection to the server is secure and username and password is encrypted by Windows 7 RDP client? Can anyone please tell how secure RDP is? I just want to confirm that username and password are not sent in clear text even if there is no SSL setup in terminal services. One more thing I want to ask is that if I use Windows XP then I see connection screen of host machine where I enter username and password, but if I use Windows 7 then I see connection dialog even before I can see remote desktop. Is the connection dialog in Windows 7 sends credentials using encryption?

share|improve this question
1) Yes -- it is secure as RDP server uses it's own SSL certificate by default. 2) Behaviour on Windows 7/Vista is correct one -- it reduces server load associated with RDP connection attempt as authorisation happens before establishing full Remote Desktop connection. You can have it on Windows XP as well -- install newer RDP Client version from Microsoft website. P.S. Similar kind of question: – LazyOne Jan 7 '13 at 14:31
up vote 2 down vote accepted

The connection is encrypted using RDP encryption. No information is sent in clear text.

SSL is used to authenticate the identity of the RDS server. It can also used to encrypt the session traffic.

share|improve this answer
Thanks for the reply. – Kumar Jan 7 '13 at 14:50
Glad to help... – joeqwerty Jan 7 '13 at 15:11

You may not see the connection dialog due to newer platforms can use Network Level Authentication. This performs the authentication before the client establishes an RDP connection to the server and consumes a session. This was done as a security measure, to reduce denial of service attacks.

When to use the “enablecredsspsupport:i:0” RDP file option

TS connection experience improvements based on RDP 6.0 client customer feedback

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.