Policy

Require secure RPC communication

Specifies whether a Remote Desktop Session Host server requires secure RPC communication with all clients or allows unsecured communication. You can use this setting to strengthen the security of RPC communication with clients by allowing only authenticated and encrypted requests. If the status is set to Enabled, Remote Desktop Services accepts requests from RPC clients that support secure requests, and does not allow unsecured communication with untrusted clients. If the status is set to Disabled, Remote Desktop Services always requests security for all RPC traffic. However, unsecured communication is allowed for RPC clients that do not respond to the request. If the status is set to Not Configured, unsecured communication is allowed. Note: The RPC interface is used for administering and configuring Remote Desktop Services.

Policy
Pack Microsoft Windows
Category Windows Components / Remote Desktop Services / Remote Desktop Session Host / Security
Policy ID 9d42367c3341
Internal name TS_RPC_ENCRYPTION

Registry

Copy registry mappings

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\fEncryptRPCTraffic (enabled) = 1
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\fEncryptRPCTraffic (disabled) = 0

Policy notes

Specifies whether a Remote Desktop Session Host server requires secure RPC communication with all clients or allows unsecured communication. You can use this setting to strengthen the security of RPC communication with clients by allowing only authenticated and encrypted requests. If the status is set to Enabled, Remote Desktop Services accepts requests from RPC clients that support secure requests, and does not allow unsecured communication with untrusted clients. If the status is set to Disabled, Remote Desktop Services always requests security for all RPC traffic. However, unsecured communication is allowed for RPC clients that do not respond to the request. If the status is set to Not Configured, unsecured communication is allowed. Note: The RPC interface is used for administering and configuring Remote Desktop Services.

Related policies

Always prompt for password upon connectionDisconnect remote session on lock for legacy authenticationDisconnect remote session on lock for Microsoft identity platform authenticationDo not allow local administrators to customize permissionsEnable Microsoft Entra ID Authentication EnforcementRequire use of specific security layer for remote (RDP) connectionsRequire user authentication for remote connections by using Network Level Authentication