The Windows Remote Desktop Connection tool gives users the ability to connect to a remote Windows PC or server over the internet or on a local network, giving them full access to the tools and software installed on it. This is made possible by Microsoft’s own Remote Desktop Protocol (or RDP for short).
All Windows PCs and servers can use RDP to connect to another Windows device, but only certain versions of Windows allow RDP connections. This proprietary protocol rivals the open-source Virtual Network Computing (VNC) protocol commonly used on Linux and other platforms.
What is RDP?
The Remote Desktop Protocol allows remote users to see and use Windows on a device in another location. Key peripherals like your keyboard and mouse are shared with the remote machine, allowing you to use and control it as if you were sat right in front of it.
For RDP connections to work, you need two components—an RDP server and an RDP client. A typical RDP server is the Windows PC or server you’re connecting to and will control. The client is a PC or mobile device with an RDP client app installed, from which you control the server. Microsoft offers its own client for Windows, macOS, Android, and iOS, with various third-party options available for Linux and other platforms.
RDP is a Windows-only protocol, and you can only establish remote connections using RDP with Windows PCs and Windows Server installations that support it. Not all versions of Windows do—Windows 10 Home, for instance, can only be used as a client to connect to other Windows Remote Desktops, not the other way around.
You can only establish a single connection to Windows PCs that have remote desktop enabled. To connect multiple users at once, you’ll need a Windows server with the Remote Desktop Services (RDS) component installed and enabled.
If you want to establish RDP connections to a secure enterprise network from a remote location, you’ll also need the Remote Desktop Gateway service installed and configured on a suitable Windows Server installation. This also offers increased security, replacing the need for an internal virtual private network (VPN).
How to enable Remote Desktop connections on Windows
To use RDP to connect to another Windows PC or server, you’ll first need to enable it on the remote server or PC. Thankfully, configuring Windows to enable Remote Desktop is a fairly straightforward process.
To enable Remote Desktop on Windows PCs:
- Open the Windows Settings menu. To do this, click the Start button, then press the Settings icon. From here, press System > Remote Desktop.
- Press the Enable Remote Desktop slider to move it to the On position. The slider will turn blue when Remote Desktop has been enabled.
- By default, the Microsoft account you use to sign in will be the account you use to connect to your PC remotely. To allow additional users to connect, press Select users that can remotely access this PC. In the Remote Desktop Users window, press Add and search for the user account.
- To allow for RDP connections over the internet, you’ll typically need to allow incoming and outgoing connections to TCP/UDP port 3389 on your network, unless port forwarding is in effect.
Tips for establishing secure Windows Remote Desktop connections
Any kind of remote desktop solution opens a hole that can potentially be exploited. RDP is no different, and the RDP port (port 3389) is well known and regularly scanned for exploits. If you plan to use Windows Remote Desktop over the internet, you need a strategy in place to secure it.
Enterprise users can use Remote Desktop Gateways to help provide a secure way to connect to an RDP server, but standard Windows users don’t have this luxury. Instead, you’ll need to use some common-sense solutions to establish secure RDP connections. Some tips for establishing a secure RDP connection include:
- Don’t allow open RDP connections over the internet. If you need to use Windows Remote Desktop over the internet, set up your own virtual private network (VPN) or use an RD Gateway to create a secure tunnel to your local network first. Allowing an open RDP connection over the internet is extremely risky, so don’t leave it to chance.
- Enable Network Level Authentication (NLA). This should be enabled by default in Windows 10, Windows Server 2012, and newer, but if you’re using older versions of Windows, you should enable this—it ensures that a connection can only occur when it is properly authenticated and a right username and password is provided.
- Restrict RDP connections to non-administrators. You should only allow non-administrator user accounts to remotely connect to Windows PCs. Standard user accounts can’t change settings, install software, and have limited access to files. This should limit the damage that any potential rogue connection could make.
- Limit password attempts. You should limit the number of incorrect passwords on an account before it is locked out, which should limit any damage from a denial of service attack.
- Use complex, secure passwords. Using secure passwords is good advice for any situation, but especially for Windows Remote Desktop connections. Don’t use the same password for multiple accounts, and use a combination of letters, numbers, and symbols.
- Set RDP for maximum encryption. By default, RDP connections will always try to use the highest possible level of encryption. To ensure that the highest level of encryption is always used, however, you can set the default encryption level using the Group Policy Editor (Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security > Set client connection encryption level > Enabled > High Level).
Connecting to a Remote Desktop on Windows
All Windows PC and Windows Servers have the Remote Desktop Connection tool available as part of the default installation. That includes older versions of Windows such as Windows 7 and 8. If you want to connect to a Windows Remote Desktop using another Windows PC, you can use this tool.
If you’re connecting to another PC on your local network, you’ll need to find the local IP address or hostname first. You can do this by clicking Windows Settings > Network & Internet > View your network properties to view information about your Remote Desktop PC, including the hostname and local IP address.
You’ll need to know the ISP-issued IP address for your internet connection if you’ve accepted the risks and you’re connecting to a Windows Remote Desktop over the internet. Just Google search “what’s my IP” to find it. For secure, enterprise networks, you’ll also need to know the RD gateway address.
To connect to a Windows Remote Desktop on another Windows PC or server:
- Press Windows key + R on your keyboard, type mstsc into the Run dialog box, then press OK to launch the Remote Desktop Connection tool. Alternatively, press the Start button, then press Windows Accessories > Remote Desktop Connection.
- Type the IP address or hostname of your Windows Remote Desktop in the Computer text box, then press Show Options.
- Type the username you’ll use to connect to your Windows Remote Desktop in the User name box.
- Confirm the display resolution and color quality of the remote connection under the Display tab.
- You can confirm the peripherals you intend to share with your Windows Remote Desktop by pressing Local Resources > More. This will allow you to share your local printer with the remote PC, for instance.
- Windows will automatically try to determine the quality of your remote connection. If you want to set this manually, choose your connection speed under the Experience tab.
- Certain enterprise networks require you to use a Remote Desktop Gateway to allow for a tunneled RDP connection to a secure network. You can set this by clicking Advanced > Settings.
- Once you’re ready to make the connection, press Connect. You may need to press Yes to a warning about the identity of the connection..
Connecting to a Windows Remote Desktop on macOS
Microsoft offers its own Remote Desktop app for macOS, which can be installed from the App Store. The interface for the Microsoft Remote Desktop app is similar to the iOS and Android clients offered by Microsoft for mobile users, so many of the steps below will be similar on those platforms.
To connect to a Windows Remote Desktop using the Microsoft Remote Desktop app on macOS:
- Click the Add PC button (if you haven’t already added a remote connection) or press the + button > Add PC.
- Type the hostname or IP address for your Windows Remote Desktop in the PC name box.
- To add a username and password to your connection, click the User account drop-down menu and select Add a user account. Provide the username and password you’ll use to connect, then press the Add button.
- If you’re connecting to an RDP server on an enterprise network, you may need to provide a Remote Desktop Gateway address. You can add this by selecting Add Gateway under the Gateway drop-down menu.
- Confirm the display quality, resolution, and color settings under the Display tab.
- You can select which peripherals you’d prefer to share with your Windows Remote Desktop under the Devices & Audio tab.
- To share any folders on your Mac with the RDP server, add these under the Folders tab, pressing the + button to find and select them.
- Press Add to save the settings for this Windows Remote Desktop connection. In the main Microsoft Remote Desktop screen, double-click on the entry to connect or right-click and press Connect, pressing Continue to accept the warning about the identity of the connection immediately afterward.
What are the best RDP Alternatives?
As we’ve mentioned, RDP connections generally require a Windows element, and while third-party RDP servers like xrdp do exist for platforms like Linux, these are generally inferior to other remote connection tools like VNC.
Our methodology for selecting an alternative to RDP
We reviewed the market for remote desktop software like RDP and analyzed the options based on the following criteria:
- A service that can connect to endpoints running any operating system
- Systems that are suitable for use by managed service providers
- Credentials sharing and security for team use
- A system for consented access in the case of user-owned devices
- Activity logging to monitor technician actions
- A free trial for cost-free assessment or a money-back guarantee
- A valuable service that is worth the price charged
Some alternative free remote desktop tools, as well as paid options, use other protocols to view and control a remote PC or server. A selection of some of the best alternative tools for remote connections on all major platforms are:
1. SolarWinds Dameware EDITOR’S CHOICE
SolarWinds Dameware offers remote support and control tools to enterprise support teams, both in-house and MSPs. It’s cloud-based, but you can install a local version to on-site Windows PCs and servers. It offers multi-factor authentication, and multi-platform support and integrates with SolarWinds Help Desk solutions.
- Designed specifically to empower technicians and solve problems faster – excellent for MSPs
- Supports a wide range of platforms including Windows, Mac, and Linux
- Can change Active Directory user attributes from within the tool, good for fast password resets
- Includes MFA to protect privileged access accounts
- Could use a longer trial period
There is a 14-day free trial.
2. ISL Online (FREE TRIAL)
ISL Online is a cloud-based remote desktop and support tool for multiple platforms, with on-site installation possible. ISL Online allows you to establish secure RDP connections between your PC and a remote desktop without compromising your network by making changes to your firewall or by using a VPN.
- Available for on-premise or in the cloud
- Agent can be installed on Windows, Linux, or Mac, support a wide range of operating systems
- Intuitive mobile app for both Android and iOS
- Can use a simple integration to enable SSO
- Would like to see a longer 30-day trial period
There is a 15-day free trial.
3. ManageEngine Remote Access Plus
ManageEngine Remote Access Plus is another MSP favorite, with both cloud-based and in-house control options and support for Linux, Windows, and macOS devices.
- Offers a suite of tools designed for support technicians alongside the remote access features
- Offers both on-premise and cloud-based deployments
- Uses an easy-to-navigate interface to browse devices by client, network, or custom grouping
- Built for teams, offering internal chat and collaboration tools
- Supports features such as Wake On Lan, live chat, and Take Control options
- Some of the more advanced features can take time to fully explore and learn
RemotePC provides encrypted remote desktop access for Windows and macOS, with a free plan available for single PCs.
- Works on nearly all operating systems including both Android and iOS
- User-friendly interface, almost a clone of Teamviewer
- Supports drag and drop functionality
- Pricing is higher than similar competing products
- Mobile app support could use improvement, specifically around the interface
TeamViewer is a free remote desktop and support tool for consumers, with paid plans for enterprise users and support for all major operating systems.
- Incredibly easy to use for both techs and customers
- Includes text, video, and voice communication
- Uses 2FA to initiate sessions
- Works well over limited bandwidth connections
- Free version often terminates early and falsely detects commercial use
6. Chrome Remote Desktop
Chrome Remote Desktop is a quick, lightweight, and free remote desktop solution that you can use from within the Google Chrome browser on major platforms.
- Completely free to use
- Easy to install and operate
- Protects communications via HTTPS
- Good for home users and infrequent use
- Can only be used in Google Chrome
- Not ideal for business use or unattended access
Remmina is an open-source remote desktop solution, allowing you to connect using either RDP or VNC, depending on your requirements.
- Completely free and open-source project
- Lightweight, uses very few resources
- Flexible deployment supports Windows, Linux, and Mac
- Offers multiple remote protocols such as VNC and RDP
- Not a great fit for businesses looking for all-in-one helpdesk solutions
It supports major Linux operating systems and works on embedded platforms like the Raspberry Pi.
Using RDP, VNC or another remote desktop protocol
It doesn’t matter whether you use RDP, VNC, or another remote desktop protocol to connect to a remote PC. A seamless experience is what matters, and for most Windows users, using RDP with the Windows Remote Desktop Connection tool will offer the simplest and smoothest experience for remote working.
That doesn’t mean it’s necessarily the best option. Other free remote desktop tools like TeamViewer are easy to install and use, while SolarWinds Dameware is great for enterprise users, especially for multiple clients.
Which is your favorite remote desktop tool? Let us know in the comments below.
What is needed for RDP access?
In order to use RDP, both the local and remote computer needs to have an RDP module active on it. RDP is built into the Windows operating system; it isn’t available on Linux or macOS. You will need to enable the RDP feature on your computer and on the computer that you want to contact before you can make an RDP connection.
Is RDP a VPN?
RDP and VPN are two different systems. RDP is the Remote Desktop Protocol and it enables you to connect to a remote computer, so its screen, and use the device. VPN standards for “virtual private network” and it is a connection security system. The concept behind a VPN is that it provides the same level of privacy that a connection on a local area network has for connections across the Internet. If you are on your office computer and access a service on a company server on the same network, outsiders can’t see any of the traffic that crosses the LAN because the network is protected from access by outsiders. The VPN cloaks Internet connections in such a way that anyone who intercepts that traffic can’t even see which remote computer you are communicating with.
What is the RDP port number?
The Remote Desktop Protocol (RDP) operates over TCP port 3389.