Listen to this Post
Microsoft has announced the deprecation of the standalone MSI installer for the Remote Desktop Protocol (RDP) client, shifting focus to the new Windows App for remote connections. While the traditional Remote Desktop Connection (MSTSC) will remain functional, the standalone MSI installer will reach end of support on March 27, 2026. After this date, IT admins must migrate users to Windows App for accessing Azure Virtual Desktop, Windows 365, and Microsoft Dev Box.
Read Microsoft’s official announcement here: Microsoft Blog
You Should Know:
1. Verify Current RDP Client Version
Check your installed RDP client version using PowerShell:
Get-ItemProperty "HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall*" | Where-Object { $_.DisplayName -like "*Remote Desktop*" } | Select-Object DisplayName, DisplayVersion
#### **2. Install Windows App (New RDP Client)**
Download the Windows App from the Microsoft Store or via Winget:
winget install "Microsoft Remote Desktop"
#### **3. Export & Import RDP Configurations**
Backup existing RDP shortcuts/settings before migration:
<h1>Export all saved RDP connections</h1> Copy-Item "$env:USERPROFILE\Documents\Default.rdp" -Destination "C:\Backup\RDP_Backup.rdp"
4. Enable Network Level Authentication (NLA) for Security
Ensure NLA is enforced for secure RDP access:
Set-ItemProperty -Path "HKLM:\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" -Name "UserAuthentication" -Value 1
#### **5. Block Legacy RDP Clients via GPO**
Prevent outdated clients from connecting:
<h1>Group Policy Path:</h1> <h1>Computer Configuration → Policies → Administrative Templates → Windows Components → Remote Desktop Services → Remote Desktop Session Host → Security</h1> <h1>Set "Require use of specific security layer for remote connections" to <strong>SSL</strong></h1>
#### **6. Automate Deployment via Intune**
Deploy Windows App via Microsoft Intune using a Win32 App Package:
<h1>Package the MSIXBundle and deploy via Intune</h1> <h1>Reference: https://learn.microsoft.com/en-us/mem/intune/apps/apps-win32-app-management</h1>
### **What Undercode Say:**
The shift from MSI-based RDP to Windows App aligns with Microsoft’s cloud-first strategy. While MSTSC remains intact, organizations must prepare for the transition. Key takeaways:
– Legacy RDP clients pose security risks; enforce NLA and SSL.
– Windows App integrates better with Azure Virtual Desktop.
– Automate deployments via Winget or Intune for scalability.
For Linux admins, use **FreeRDP** as an alternative:
sudo apt install freerdp2-x11 -y xfreerdp /v:192.168.1.100 /u:admin /p:Password123 +clipboard
**Expected Output:**
A secure, modernized RDP environment leveraging Windows App for cloud-based remote access.
References:
Reported By: Charlescrampton Continuing – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅
