How to Set Up Remote Desktop on Windows Server: Complete Guide

## How to Set Up Remote Desktop on Windows Server Remote Desktop Services (RDS) lets multiple users connect to a Windows Server simultaneously, each with their own desktop session. It is essential for remote work, centralized application deployment, and thin-client environments. Here is how to set it up properly. ## Prerequisites - [Windows Server 2022 Standard](/en/products/windows-server-2022-standard) or [Windows Server 2025 Standard](/en/products/windows-server-2025-standard) - [Windows 11 Pro](/en/products/windows-11-professional-2) on client machines (Pro required for Remote Desktop host) - Adequate hardware: 4+ cores, 8+ GB RAM (more for multiple users) - Static IP address or DNS name - Open port 3389 (or custom port) on your firewall ## Part 1: Enable Remote Desktop (Basic — 2 Users) For simple remote access with up to 2 concurrent admin connections: 1. Open **Server Manager** 2. Click **Local Server** in the left panel 3. Find "Remote Desktop" — click **Disabled** 4. Select **Allow remote connections to this computer** 5. Check **Allow connections only from computers running Remote Desktop with Network Level Authentication** 6. Click **OK** You can now connect using the Remote Desktop Connection app (mstsc.exe) from any [Windows 11 Pro](/en/products/windows-11-professional-2) machine. ## Part 2: Install Remote Desktop Services (Multiple Users) For more than 2 concurrent users, you need the RDS role: ### Step 1: Install the RD Session Host Role 1. Open **Server Manager > Manage > Add Roles and Features** 2. Select **Role-based or feature-based installation** 3. Choose your server 4. Under **Roles**, check **Remote Desktop Services** 5. Expand and select: - **Remote Desktop Session Host** — Core RDS functionality - **Remote Desktop Licensing** — Manages RDS CALs - **Remote Desktop Web Access** (optional) — Browser-based access 6. Click **Install** and restart when prompted ### Step 2: Configure the RD Licensing Server 1. Open **Remote Desktop Licensing Manager** from Tools menu 2. Right-click your server > **Activate Server** 3. Follow the activation wizard (internet or phone) 4. After activation, right-click > **Install Licenses** 5. Enter your RDS CAL license pack information ### Step 3: Point Session Host to Licensing Server 1. Open **Group Policy Editor** (gpedit.msc) 2. Navigate to: Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Licensing 3. Enable **Use the specified Remote Desktop license servers** — enter your server name 4. Enable **Set the Remote Desktop licensing mode** — choose Per User or Per Device 5. Run `gpupdate /force` ## Part 3: Security Best Practices Remote Desktop is a common attack target. Secure it properly: ### Change the Default Port 1. Open Registry Editor (regedit) 2. Navigate to `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp` 3. Change **PortNumber** from 3389 to a custom port (e.g., 33890) 4. Update your firewall rules 5. Restart the Remote Desktop Services service ### Enable Network Level Authentication (NLA) NLA requires authentication before establishing a full RDP session, blocking many brute-force attacks. This should be enabled by default. ### Use Strong Passwords and Account Lockout - Enforce 12+ character passwords - Configure account lockout after 5 failed attempts - Use Group Policy: Computer Configuration > Windows Settings > Security Settings > Account Policies ### Implement Multi-Factor Authentication Use Azure MFA or a third-party solution like Duo Security for RDP connections. ### Use an RD Gateway RD Gateway tunnels RDP through HTTPS (port 443), adding TLS encryption and eliminating the need to expose port 3389 to the internet. ### Restrict Access with Firewall Rules - Allow RDP only from specific IP addresses or ranges - Use Windows Firewall with Advanced Security or a network firewall - Consider a VPN for remote access instead of direct RDP exposure ### Keep Everything Updated RDP vulnerabilities (like BlueKeep) have been devastating. Ensure your [Windows Server](/en/products/windows-server-2022-standard) is always patched. ## Part 4: Licensing Requirements RDS requires additional Client Access Licenses (CALs) beyond the base server license: | License | What It Covers | |---|---| | Windows Server License | The server operating system | | Windows Server CAL | Basic server access per user/device | | RDS CAL | Remote Desktop session per user/device | You need **both** a Windows Server CAL and an RDS CAL for each user or device connecting via Remote Desktop. ### Per-User vs Per-Device CALs - **Per-User**: Covers one user connecting from any device (best when users have multiple devices) - **Per-Device**: Covers one device used by any user (best for shared workstations) ## Part 5: Client Configuration On your client machines: 1. Open **Remote Desktop Connection** (mstsc.exe) 2. Enter the server IP or hostname 3. Click **Show Options** for advanced settings: - **Display**: Set resolution and color depth - **Local Resources**: Choose which local drives, printers, clipboard to share - **Experience**: Adjust for connection speed 4. Click **Connect** and enter your credentials ### From Mac Download **Microsoft Remote Desktop** from the Mac App Store. Enter the same connection details. ### From Mobile Use the **Microsoft Remote Desktop** app for iOS or Android. ## Troubleshooting Common Issues ### "Remote Desktop can't connect to the remote computer" - Verify Remote Desktop is enabled on the server - Check firewall rules (port 3389 or custom port) - Ensure the user is in the Remote Desktop Users group - Test connectivity with `telnet serverip 3389` ### "The number of connections to this computer is limited" - You need RDS roles installed for more than 2 connections - Verify RDS CALs are installed and assigned ### Slow Performance - Reduce display color depth to 16-bit - Disable visual effects (wallpaper, font smoothing, animations) - Check server CPU and RAM usage — add resources if needed ## Next Steps Get started with the right licenses: - [Windows Server 2022 Standard](/en/products/windows-server-2022-standard) or [2025 Standard](/en/products/windows-server-2025-standard) - [Windows 11 Pro](/en/products/windows-11-professional-2) for client machines (Pro required for RDP host) All available at wholesale pricing from Distivo with instant digital delivery.

How to Set Up Remote Desktop on Windows Server: Complete Guide

Post simili

Windows Activation Troubleshooting: Fix Every Error Code

How to Transfer a Windows License to a New PC: Complete Guide

How to Upgrade from Windows 10 to Windows 11: Complete Guide

How to Set Up Remote Desktop on Windows Server: Complete Guide

Post simili

Windows Activation Troubleshooting: Fix Every Error Code

How to Transfer a Windows License to a New PC: Complete Guide

How to Upgrade from Windows 10 to Windows 11: Complete Guide