Run Microsoft Remote Desktop (RDP) in Public Mode to avoid storing logon credentials on host?
Hallo!
Is it possible to run Microsoft Remote Desktop (RDP) in "Public Mode" (mstsc /public) to avoid storing logon credentials on host and minimize the risk of "Pass the Hash" attacks?
Hello,
Could you verify the embedded mode. We send the password directly to the Microsoft ActiveX.
David Hervieux
Hallo!
I do use the "Embedded mode", but I cannot find any settings for the "Public Mode".
I might also have missread the purpose of the "Public Switch"? (/public) it seams that it is used to not store session information on the client (and this is of course also important).
Does running the RDP session in "Embedded mode" produce the same result (i.e. no Connection information is stored on the client)?
Is the RDP session also run in private memory so no application can listen in to the session?
Hello,
We don't have the Public setting in embedded mode. From what I know mstsc usually store the credentials in the Windows Credential Store.
From the MS web site: In public mode, passwords and bitmaps are not cached.
I will verify if the ActiveX support this mode.
David Hervieux
I have found the Public mode in the ActiveX. We will add this soon.
David Hervieux