Home / server / Questions / 318562
In Process
Adam Brand
Asked: 2011-10-05 19:12:03 +0800 CST

Is there a way to show an RDP session's encryption level from the commandline/Powershell?

  • 772

For Windows 2008, I need to create a script that will show whether connected RDP sessions are set at "high" encryption or something else (e.g., "compatible").

Does anyone know of a way to get this without going through the GUI?

I investigated wmic and powershell, but was unable to locate anything. I found a .net Powershell module for Terminal Services, but all it would do was display the status (i.e., list sessions). I actually need to see the encryption level.

windows-server-2008 powershell command-line-interface rdp remote-desktop-services

2 Answers

  1. Looks like this power shell command should do it for you

    get-childitem -path RDS:\RDSConfiguration\Connections\RDP-Tcp\SecuritySettings\EncryptionLevel | format-list

    http://technet.microsoft.com/en-us/library/ee791871(WS.10).aspx

    • 1

  2. The C++ API for this is the WTSQuerySessionInformation with 26 as the value for WTS_INFO_CLASS. None of the included Powershell Modules implement this, but there is one in the TechNet script gallery here. The underlying module does implement a couple of types that are not available until Server 2008 R2, though so you may have to modify it slightly to get it to work as expected. You can find more info on the supported structures here. I know this is close to a year after the fact, but maybe others are searching for this...

    • 0