I use RDP on Windows 7 (SP1) to connect to Windows Server 2008. There is no SSL I have setup on the server yet which I will do. Before that I just wondering if the connection to the server is secure and username and password is encrypted by Windows 7 RDP client? Can anyone please tell how secure RDP is? I just want to confirm that username and password are not sent in clear text even if there is no SSL setup in terminal services. One more thing I want to ask is that if I use Windows XP then I see connection screen of host machine where I enter username and password, but if I use Windows 7 then I see connection dialog even before I can see remote desktop. Is the connection dialog in Windows 7 sends credentials using encryption?

  • 1) Yes -- it is secure as RDP server uses it's own SSL certificate by default. 2) Behaviour on Windows 7/Vista is correct one -- it reduces server load associated with RDP connection attempt as authorisation happens before establishing full Remote Desktop connection. You can have it on Windows XP as well -- install newer RDP Client version from Microsoft website. P.S. Similar kind of question: serverfault.com/questions/198519/how-secure-exactly-is-rdp?rq=1 – LazyOne Jan 7 '13 at 14:31

The connection is encrypted using RDP encryption. No information is sent in clear text.

SSL is used to authenticate the identity of the RDS server. It can also used to encrypt the session traffic.



  • Glad to help... – joeqwerty Jan 7 '13 at 15:11

You may not see the connection dialog due to newer platforms can use Network Level Authentication. This performs the authentication before the client establishes an RDP connection to the server and consumes a session. This was done as a security measure, to reduce denial of service attacks.

When to use the “enablecredsspsupport:i:0” RDP file option

TS connection experience improvements based on RDP 6.0 client customer feedback

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.