{"id":71843,"date":"2022-11-16T12:00:00","date_gmt":"2022-11-16T17:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=71843"},"modified":"2022-12-30T16:17:45","modified_gmt":"2022-12-30T21:17:45","slug":"what-is-remote-desktop-protocol-rdp","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/what-is-remote-desktop-protocol-rdp","title":{"rendered":"What Is Remote Desktop Protocol (RDP)?"},"content":{"rendered":"\n
Remote desktop protocol (RDP) is a proprietary communication protocol initially built by Microsoft. It allows two computers to exchange a graphical user interface (GUI) via transmission control protocol (TCP)\/internet protocol (IP). RDP is an extension of the T.120 point-to-point (P2P) communication protocols that are standardized by the International Telecommunications Union (ITU). <\/p>\n\n\n\n
There are three primary use cases for RDP. Firstly, IT admins can use this protocol to remotely perform administrative tasks, such as PC tuneups, ID protection settings, software installations, computer troubleshooting, and printer setups. By using RDP, IT teams can easily maintain and diagnose problems that individual employees are encountering from afar. <\/p>\n\n\n\n
Secondly, employees can leverage RDP to access their workstations remotely. For example, they could access enterprise resources while working from home or traveling. Thirdly, RDP is also helpful for \u201cheadless computers<\/a>\u201d or thin clients<\/a> that employees may want to leverage to access powerful workstations in the office. <\/p>\n\n\n\n RDP is a secure protocol that furnishes the user on one computer with a GUI that they can use to connect to another PC over TCP\/IP network directly. For this to work, the user originating the request must have an RDP client application installed on their computer. Similarly, the PC the user is trying to access must be running an RDP server software, allowing the client to connect remotely. <\/p>\n\n\n\n Once linked, the user can now see the desktop of the PC to which they have connected through RDP to access applications and files on that desktop. All current Windows operating systems (OSs), including Windows Server and desktop versions, come with a built-in RDP server that provides remote desktop connection capabilities. <\/p>\n\n\n\n However, the RDP client software is only available to Windows Pro and higher versions. For example, Windows Home users must upgrade their OSs to Windows Pro or higher versions to use remote desktop connection (RDC) services. <\/p>\n\n\n\n RDC is one of the three client components of Microsoft\u2019s Remote Desktop Services (RDS). It enables remote client PCs \u2014 powered by RDP \u2014 to connect with Windows-based platforms. The two other client components of Microsoft\u2019s RDS are Fast User Switching<\/a> and Windows Remote Assistance<\/a>. Aside from RDCs, RDP clients are available for Unix, Linux, macOS, Android, and iOS. <\/p>\n\n\n\n By default, RDP-based communications are established over TCP port 3389, or if the remote desktop gateway is used, the connections are made over TCP port 443. When a user connects to a remote PC, the RDP client redirects the mouse and keyboard events to the remote server. RDP uses its own on-screen mouse and keyboard driver on the remote server to receive these input events from RDC clients. <\/p>\n\n\n\n To help render the user\u2019s actions, RDP uses its own graphics driver to construct the display output into TCP\/IP packets that are then redirected to the RDC client. On the client\u2019s side, the RDC client receives the rendered data and translates it into corresponding graphics device interface (GDI)<\/a> application programming interface (API) calls. <\/p>\n\n\n\n As a multi-channel platform, RDP uses separate virtual channels for device communication, presentation data, and encrypted input events between the RDP client and server. RDP\u2019s virtual channel ecosystem is extensible and can support up to 6,400 disparate channels for data connections and multipoint transmissions. <\/p>\n\n\n\n Below are some advantages that organizations and users can derive from RDP:<\/p>\n\n\n\n Despite the advantages, RDP has its own disadvantages. Below are a few of them:<\/p>\n\n\n\n RDP is the foundation for many remote access solutions within Windows-based environments. As such, it has become one of the most popular targets for hackers. Below are three common RDP security risks that hackers can exploit:<\/p>\n\n\n\n Most users rely on passwords to protect their workstations. They often reuse the same password across different systems, including RDP logins. If the password is weak, any hacker can attempt a brute force attack through techniques such as credential stuffing or rainbow table attack<\/a> to gain access to the enterprise network. To mitigate these attacks, organizations can use single sign-on (SSO)<\/a>, multi-factor authentication (MFA)<\/a>, and adhere to password management best practices<\/a>.<\/p>\n\n\n\n By default, RDP connections take place on TCP port 3389. If this port is left open, an attacker can easily carry out on-path attacks and compromise the network. To protect against port-based attacks, you\u2019ll need to lock down port 3389 and implement firewall rules. <\/p>\n\n\n\n Microsoft has already provided and continues to provide OS updates and hotfixes for some of the most severe RDP vulnerabilities. Still, some of these vulnerabilities can cause damage, especially when left unpatched. <\/p>\n\n\n\n For example, \u201cBlueKeep<\/a>\u201d\u2014a wormable attack that allows hackers to execute arbitrary codes on a remote PC\u2014can cause damage to the organization if the OS is not patched. To mitigate against these vulnerabilities, you can leverage patch management tools<\/a> to ensure their OS and applications are up to date. <\/p>\n\n\n\n It\u2019s no longer a secret that the shift to hybrid workplaces is having severe security implications for most modern organizations. To succeed in such environments, companies must ensure remote access solutions like mobile device management (MDM)<\/a> tools are secure and fit into the organization\u2019s budget.\u00a0<\/p>\n\n\n\n JumpCloud Remote Assist<\/a> is a low-cost, easy-to-use, and secure remote access solution. IT admins can leverage the tool to connect to end users\u2019 Windows, macOS, and Linux endpoints and fix technical issues from an intuitive cloud-based console. <\/p>\n\n\n\n When used in an organization, JumpCloud Remote Assist allows IT admins to streamline access to organization resources. For example, they can easily customize, provision, and manage new security policies that better suit evolving workflows from a single place. <\/p>\n\n\n\n Remote Assist will be a FREE add-on for organizations already using the JumpCloud Directory Platform<\/a>\u00ae<\/sup> to manage Windows, macOS, and Linux endpoints.\u00a0<\/p>\n\n\n\n\nHow Remote Desktop Protocol Works<\/h2>\n\n\n\n
Pros and Cons of RDP<\/h2>\n\n\n\n
\n
\n
RDP Security Risks <\/h2>\n\n\n\n
Weak Authentication<\/h3>\n\n\n\n
Unrestricted Port Access<\/h3>\n\n\n\n
Unpatched Vulnerabilities<\/h3>\n\n\n\n
RDP Alternative<\/h2>\n\n\n\n