Run Microsoft Remote Desktop (RDP) in Public Mode to avoid storing logon credentials on host?

Run Microsoft Remote Desktop (RDP) in Public Mode to avoid storing logon credentials on host?

avatar

Hallo!

Is it possible to run Microsoft Remote Desktop (RDP) in "Public Mode" (mstsc /public) to avoid storing logon credentials on host and minimize the risk of "Pass the Hash" attacks?

All Comments (4)

avatar

Hello,
Could you verify the embedded mode. We send the password directly to the Microsoft ActiveX.

David Hervieux

avatar

Hallo!

I do use the "Embedded mode", but I cannot find any settings for the "Public Mode".

I might also have missread the purpose of the "Public Switch"? (/public) it seams that it is used to not store session information on the client (and this is of course also important).

Does running the RDP session in "Embedded mode" produce the same result (i.e. no Connection information is stored on the client)?

Is the RDP session also run in private memory so no application can listen in to the session?

avatar

Hello,
We don't have the Public setting in embedded mode. From what I know mstsc usually store the credentials in the Windows Credential Store.

From the MS web site: In public mode, passwords and bitmaps are not cached.

I will verify if the ActiveX support this mode.

David Hervieux

avatar

I have found the Public mode in the ActiveX. We will add this soon.

David Hervieux