RDP without password enabled by default RRS feed

  • General discussion

  • I was shocked by that fact.

    Create admin user without password, enable RDP, uncheck "ipsec only", login remotely, and you are there !

    Also if the same user was logged on locally and you are moving console session from local to remote control, session will disconnect shortly (5..30 seconds) and reconnect to local console.

    I checked local security policy and found that remote logins without password are disabled.

    Previous windows versions behave in the same situation normally. They prohibit remote logins without password and do not disconnect reconnected sessions.

    Monday, October 19, 2015 7:14 AM