Enable Remote Desktop

  • Article

There are several settings that must be configured to enable Remote Desktop connections during an unattended installation. First, you must enable Remote Desktop connections, and then you must enable the Remote Desktop group in Windows Firewall.

  1. Create a new answer file or update your existing answer file.
    For more information about creating or updating an answer file, see Work with Answer Files in Windows SIM.

  2. Add the following settings to your answer file in the listed configuration pass:

Component Configuration Pass

Microsoft-Windows-TerminalServices-LocalSessionManager

4 specialize

Networking-MPSSVC-Svc\FirewallGroup

4 specialize

  1. In the answer file pane, right-click FirewallGroups and select Insert new Firewall Group.

  2. Configure the following settings in the answer file pane.

Component Value

Microsoft-Windows-TerminalServices-LocalSessionManager

fDenyTSConnections=false

Networking-MPSSVC-Svc\FirewallGroups\FirewallGroup

Active=true

Group=Remote Desktop

Profile=all
  1. (Optional) Specify how users are authenticated.
    If you do not specify the following setting, users will not be able to remotely connect from computers that do not run Remote Desktop with network-level authentication. Add the following setting to your answer file to enable remote desktop connections from computers running any version of Remote Desktop:
Component Configuration Pass

Microsoft-Windows-TerminalServices-RDP-WinStationExtensions

4 specialize
Component Value

Microsoft-Windows-TerminalServices-RDP-WinStationExtensions

UserAuthentication=0