Require use of specific security layer for remote (RDP) connections

This policy setting specifies whether to require the use of a specific security layer to secure communications between clients and RD Session Host servers during Remote Desktop Protocol (RDP) connections.

If you enable this policy setting, all communications between clients and RD Session Host servers during remote connections must use the security method specified in this setting. The following security methods are available:

* Negotiate: The Negotiate method enforces the most secure method that is supported by the client. If Transport Layer Security (TLS) version 1.0 is supported, it is used to authenticate the RD Session Host server. If TLS is not supported, native Remote Desktop Protocol (RDP) encryption is used to secure communications, but the RD Session Host server is not authenticated.

* RDP: The RDP method uses native RDP encryption to secure communications between the client and RD Session Host server. If you select this setting, the RD Session Host server is not authenticated.

* SSL (TLS 1.0): The SSL method requires the use of TLS 1.0 to authenticate the RD Session Host server. If TLS is not supported, the connection fails.

If you disable or do not configure this policy setting, the security method to be used for remote connections to RD Session Host servers is not specified at the Group Policy level.

Supported on: At least Windows Vista

Security Layer


  1. RDP
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
    Value NameSecurityLayer
    Value TypeREG_DWORD
    Value0
  2. Negotiate
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
    Value NameSecurityLayer
    Value TypeREG_DWORD
    Value1
  3. SSL (TLS 1.0)
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
    Value NameSecurityLayer
    Value TypeREG_DWORD
    Value2

Choose the security layer from the drop-down list.


terminalserver.admx

Administrative Templates (Computers)

Administrative Templates (Users)