Remote desktop question

[Maxima]

hi , as u know in some of remote desktop connections you enter ip ( using old mstsc )

, & you can get into login screen of remote desktop connection where you enter user/pass ,

but this is not same in all rdps , and you see this message : Your credentials are correct, but Windows does not allow empty passwords , so i want to know how can i make it possible to allow the rdp which i want to access into login screen with using old mstsc with only entering ip - is there any configs to change and allow access?
thanks ,

 

[kastriot]

Using the policy, you can disable blank password restrictions. Below are the steps to change the policy. 1. On the Start menu, type run then press enter. 2. Run window will appear. Type gpedit.msc, then click ok. This gpedit is the group policy editor. 3. Go to this path, Computer ConfigurationWindows SettingsSecurity SettingsLocal PoliciesSecurity OptionsAccounts. Select Limit local account use of blank passwords to console logon only. 4. Click on disable button then select ok. 5. Lastly, close the Group Policy Editor window. Windows default selection on Group Policy Editor is enabled.

 

[Maxima]

thanks kastriot , but i have same problem . i use remote desktop 5.1 that one in picture . i still cant get into login screen of rdp without entering user , even with entering a user like guest , cant connect

 

[Solaris17]

This isnt possible, If I am understanding you correctly.

 

[Maxima]

no , its possible . for exmaple you can try this ip , 85.25.2.5 enter this ip in remote desktop connection for user write Guest and leave password empty , and then click connect , u will see what i mean

 

[Solaris17]

no , its possible . for exmaple you can try this ip , 85.25.2.5 enter this ip in remote desktop connection for user write Guest and leave password empty , and then click connect , u will see what i mean

Just as I thought, pretty sure I understand what you mean. but RDP is just the connection to the PC. The machine (host) being connected too controls the action of logging in with or without a password not RDP.

I went to check my servers to see depending on if this is a server or client OS (pro version and up) you should be able to control this via GPO.

you will want to read this.

https://docs.microsoft.com/en-us/wi...-use-of-blank-passwords-to-console-logon-only

Also I would feel responsible so while I promise just to help get what you want done I can’t and good conscience (I’m a sec guy) continue without telling you

This is a seriously bad practice

Rdp doesn’t have brute force protection

Rdp has/had side channel attacks that utilized what you are doing which is why it’s not enabled by default

Rdp should NOT be opened to public WAN

 

[Maxima]

i read . all i know is that theres a way , bcoz how its possible you can connect to rdps like i sent its ip . but for some others cant do the same , so that means somethings need to be modified but what ? i just want to know that . or you may have seen before , in some rdps you can login with any user password but after you connect you see login page ( invalid user/password ) . i wanna know how they config that , i blieve here are experts and they know how . but if you all guys say no . nothing to do then .

 

[Solaris17]

i read . all i know is that theres a way , bcoz how its possible you can connect to rdps like i sent its ip . but for some others cant do the same , so that means somethings need to be modified but what ? i just want to know that . or you may have seen before , in some rdps you can login with any user password but after you connect you see login page ( invalid user/password ) . i wanna know how they config that , i blieve here are experts and they know how . but if you all guys say no . nothing to do then .

I edited my post it’s a GPO

 

[Kursah]

Should be using VPN or RDGateway and passwords for WAN facing RDP connections IMHO. But ya, Sol is correct there's a GPO you can edit to meet your needs. My question is, why not use passwords?

 

[remixedcat]

Use VNC instead. Much better and more secure. I use Meraki systems manager as my VNC server and Tight VNC as the viewer. Easy remote anywhere and a new password is generated each session.

 

[Maxima]

Should be using VPN or RDGateway and passwords for WAN facing RDP connections IMHO. But ya, Sol is correct there's a GPO you can edit to meet your needs. My question is, why not use passwords?

with no password you can enter to login menu of rdp where u see in second picture . i mean its not like ( if no passwords you will login successfully to desktop and able to use anything ) no ,what im saying is only to entering where u see in second pic ,
remixedcat additional tools have same results , simply i want to enter login area of rdp when i enter ip in remote desktop connection 5.1 . so i can type user and password inside that login menu . im crying now its so hard lol

 

[Solaris17]

with no password you can enter to login menu of rdp where u see in second picture . i mean its not like ( if no passwords you will login successfully to desktop and able to use anything ) no ,what im saying is only to entering where u see in second pic ,
remixedcat additional tools have same results , simply i want to enter login area of rdp when i enter ip in remote desktop connection 5.1 . so i can type user and password inside that login menu . im crying now its so hard lol

I mean just set the GPO.

 

[newtekie1]

Disable Network Level Authentication on the computers you are trying to remote control. That will take you to the login screen on the computer when you remote into it instead of requiring you to enter the username and password before you connect. It will also allow you to connect to the computer with older versions of the remote desktop client(like what comes with XP).

Of course, this is extremely extremely insecure...

 

[kastriot]

Try to reset password for admin too.