Credential Protection
RDP without exposing credentials: RCG and Restricted Admin
Stop RDP leaving reusable credentials on servers: Remote Credential Guard, Restricted Admin mode, DisableRestrictedAdmin and credential delegation policy.
Intermediate
Guides tagged
#rdp
Legacy Protocols
Hardening Remote Desktop (RDP) on Windows
Secure Remote Desktop with NLA, the TLS security layer, PKI certificates, restricted users, firewall scoping, session limits and the right logs.
Foundation
Windows Firewall
Windows Firewall hardening against lateral movement
Use Windows Defender Firewall as a lateral-movement control: enforce all profiles by GPO, ignore local rules, scope RDP/WinRM/SMB to management subnets and log what matters.
Foundation