Oudel Inc
How to Enable Remote Desktop from CMD

How to Enable Remote Desktop from CMD

David Jonson's photo
David Jonson
·

4 min read

Remote Desktop Protocol (RDP) allows users to remotely access and control another computer as if they were physically present. This feature is handy for IT administrators, technical support teams, and individuals who need to access their systems remotely. While enabling Remote Desktop through the graphical user interface (GUI) is straightforward, using the Command Prompt (CMD) provides a quicker, more versatile alternative, especially in automated or headless environments. In this article, we’ll walk you through enabling Remote Desktop using CMD in Windows.

Prerequisites

Before proceeding, ensure the following:

  1. Administrative Privileges: You must have administrative access to the system you want to configure.

  2. Windows Version: Remote Desktop is available in Windows Professional, Enterprise, and Server editions. It is not included in the Home edition.

  3. Network Configuration: Ensure the remote system and the client are connected to the same network or configured to allow remote connections over the internet.

Why Use CMD to Enable Remote Desktop?

Enabling Remote Desktop via CMD is beneficial for several reasons:

  • Speed: Faster than navigating through the GUI.

  • Automation: Useful for scripting and deploying configurations to multiple machines.

  • Remote Management: Ideal for enabling Remote Desktop on systems accessed remotely.

Steps to Enable Remote Desktop from CMD

Step 1: Open the Command Prompt as Administrator

To execute the necessary commands, you need administrative privileges:

  1. Press Win + S and type cmd.

  2. Right-click on Command Prompt and select Run as Administrator.

Alternatively, press Win + X, then select Command Prompt (Admin) or Windows Terminal (Admin).

Step 2: Enable Remote Desktop

Use the following command to enable Remote Desktop:

reg add "HKLM\System\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f

  • Explanation:

    • This command modifies the Windows registry to allow remote connections.

    • The key fDenyTSConnections determines whether Remote Desktop is enabled (0) or disabled (1).

Step 3: Allow Remote Desktop Through the Firewall

By default, Remote Desktop connections are blocked by the Windows Firewall. Use the following command to allow them:

netsh advfirewall firewall set rule group="Remote Desktop" new enable=Yes

  • Explanation:

    • This command enables the firewall rule group for Remote Desktop, allowing incoming connections.
Step 4: Verify Configuration

To confirm that Remote Desktop is enabled and the firewall is configured:

  1. Check the registry key:

     reg query "HKLM\System\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections
    • If the output shows 0x0, Remote Desktop is enabled.

  2. Verify firewall rules:

     netsh advfirewall firewall show rule name="Remote Desktop"
    • Ensure the rule is enabled and active.

Advanced Configuration Options

Set Remote Desktop Port

By default, Remote Desktop uses port 3389. To change this port for security purposes:

  1. Modify the registry key:

     reg add "HKLM\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v PortNumber /t REG_DWORD /d <NewPortNumber> /f

    Replace <NewPortNumber> with the desired port number.

  2. Restart the Remote Desktop service:

     net stop termservice && net start termservice
Enable Network Level Authentication (NLA)

Network Level Authentication adds an extra layer of security by requiring users to authenticate before establishing a remote session.

  1. Enable NLA via CMD:

     reg add "HKLM\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v UserAuthentication /t REG_DWORD /d 1 /f

  2. Confirm the setting:

     reg query "HKLM\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v UserAuthentication

Scripting the Process

For deploying Remote Desktop settings to multiple machines, you can create a batch script:

@echo off
:: Enable Remote Desktop
reg add "HKLM\System\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f

:: Allow Remote Desktop through Firewall
netsh advfirewall firewall set rule group="Remote Desktop" new enable=Yes

:: Enable Network Level Authentication
reg add "HKLM\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v UserAuthentication /t REG_DWORD /d 1 /f

echo Remote Desktop has been enabled and configured.

Save the file with a .bat extension and run it as an administrator.

Troubleshooting Common Issues

  1. Remote Desktop Connection Fails:

    • Ensure the target machine is powered on and connected to the network.

    • Verify that Remote Desktop is enabled and the firewall rules are active.

  2. Incorrect Credentials:

    • Confirm the username and password of the account being used for the connection.

    • Ensure the user account has permission to access Remote Desktop.

  3. Port Conflicts:

    • If you change the default RDP port, ensure it’s not already in use by another service.

  4. Firewall Blocking Connections:

    • Double-check the firewall rules for Remote Desktop and ensure the correct port is open.

Benefits of Using CMD for Enabling Remote Desktop

  • Efficiency: Enables quick configuration without navigating multiple menus.

  • Remote Accessibility: Allows Remote Desktop to be enabled even when GUI access is unavailable.

  • Automation: Simplifies deployment across multiple systems using scripts.

Conclusion

Enabling Remote Desktop through CMD is a powerful method for configuring remote access efficiently. Whether you’re managing a single machine or multiple systems, the Command Prompt provides the tools needed to enable Remote Desktop, configure firewall settings, and enhance security. By following the steps and tips outlined in this guide, you can ensure seamless and secure remote access to your Windows devices.