RDP setting group policy
1.Login to domain controller and go to Group Policy Management tool
2.Click to Domain name and double click Group Policy Object
3.Right click and new a GPO"RDP settings"
4.Go to "Computer Configuration"->Policies->Administrative Templates
5.Click "Windows Components/Remove Desktop Services/Remote Desktop Session Host/Security"
6.Enable "Require use of specific Security layer for remove(RDP)connections"
7.Select "SSL(TLS1.0)" for security Layer
8.Enable "Require user authentication for remove connections by using Network Level Authentication"
9.Enable "Set client connection encrytion level" and set "Encryption Level" to "High Level"
10.Go to aba.com and right link this GPO"RDP settings"
Verify on client
1. gpupdate /force "refresh GP"
2. gpresult /R "check GP status"