Ensure UDP 3389 is allowed bidirectionally. Force UDP test:
session bpp:16 disable wallpaper:1 disable menu anims:1 disable full window drag:1 disable cursor shadow:1 Microsoft removed RemoteFX in 2020 due to security holes. However, RemoteFX USB redirection is still partially present in Windows 10/11 Enterprise and Server 2019+ under a different policy. remote desktop connection mstsc
HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\ DWORD: DebugLog = 1 DWORD: DebugLevel = 3 Logs appear in %USERPROFILE%\Documents\RDP Debug\ — includes TCP/UDP negotiation, certificate warnings, and bandwidth decisions. Saved .rdp files store passwords with Windows Data Protection API (DPAPI) — tied to your Windows user and machine. Interesting failure: If you migrate a saved .rdp file to another PC or even a different user profile on the same PC, the password silently fails. mstsc will prompt again but never tells you the stored password is invalid — it just re-prompts. Ensure UDP 3389 is allowed bidirectionally
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\ DWORD: VisualExperiencePolicy = 1 DWORD: ImageQualityPolicy = 2 (0=high, 1=lossy, 2=adaptive but re-evaluates) Use mstsc.exe with a custom .rdp file containing: mstsc will prompt again but never tells you