{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-172-match-remote-desktop-launch-links-to-the-intended-client/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260908-172-match-remote-desktop-launch-links-to-the-intended-client/", "slug": "dse-20260908-172-match-remote-desktop-launch-links-to-the-intended-client", "url": "https://update.dsesecurity.com/updates/dse-20260908-172-match-remote-desktop-launch-links-to-the-intended-client/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260908-172-match-remote-desktop-launch-links-to-the-intended-client.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-172-match-remote-desktop-launch-links-to-the-intended-client/" }, "title": "Match Remote Desktop launch links to the intended client", "summary": "Which Remote Desktop URI scheme can a managed client actually interpret?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "network-infrastructure", "label": "Networks & infrastructure", "alt": "Resilient network core with engineered blue and gold data paths.", "card_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-08T18:14:19+00:00", "modified_at": "2026-09-08T18:26:31+00:00", "reviewed_on": "2026-09-08", "reading_minutes": 1, "word_count": 204, "potentially_affected": "Administrators distributing links that launch Microsoft Remote Desktop clients.", "dse_recommendation": "Maintain a small catalog of approved link patterns with their intended client, command, and parameter names.", "primary_source": { "name": "Remote Desktop URI scheme", "url": "https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/remote-desktop-uri", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Microsoft documents URI formats that invoke Remote Desktop clients with commands or preset attributes. The ms-rd scheme is documented for the Windows Desktop client, MSRDC. The legacy rdp scheme is documented for the macOS, iOS, and Android clients. Microsoft Learn.

\n

Applicability

\n

Identify the installed client and platform before publishing a launch link. Review the source attribute table for each target population. Keep the command being requested, the destination information, and platform support visible to the person reviewing the link.

\n

DSE recommendation

\n

Maintain a small catalog of approved link patterns with their intended client, command, and parameter names. Use a nonproduction destination while building the pattern. Have a second reviewer inspect encoded values and the resulting destination before distribution. Avoid embedding sensitive material in a link merely because an attribute field exists. Provide a clear owner for correcting or retiring stale links.

\n

Verification

\n

Open each pattern on every supported managed client and record which application launches and which settings it receives. Test an unsupported client as a negative case and document the user-facing result. Confirm the destination before completing an authorized connection. Retest the catalog when the client application or platform changes.

\n

Official references

\n

Microsoft Learn: Remote Desktop URI scheme. Source reviewed September 8, 2026.

", "content_text": "Source facts\nMicrosoft documents URI formats that invoke Remote Desktop clients with commands or preset attributes. The ms-rd scheme is documented for the Windows Desktop client, MSRDC. The legacy rdp scheme is documented for the macOS, iOS, and Android clients. Microsoft Learn.\nApplicability\nIdentify the installed client and platform before publishing a launch link. Review the source attribute table for each target population. Keep the command being requested, the destination information, and platform support visible to the person reviewing the link.\nDSE recommendation\nMaintain a small catalog of approved link patterns with their intended client, command, and parameter names. Use a nonproduction destination while building the pattern. Have a second reviewer inspect encoded values and the resulting destination before distribution. Avoid embedding sensitive material in a link merely because an attribute field exists. Provide a clear owner for correcting or retiring stale links.\nVerification\nOpen each pattern on every supported managed client and record which application launches and which settings it receives. Test an unsupported client as a negative case and document the user-facing result. Confirm the destination before completing an authorized connection. Retest the catalog when the client application or platform changes.\nOfficial references\nMicrosoft Learn: Remote Desktop URI scheme. Source reviewed September 8, 2026.", "content_markdown": "## Source facts\n\nMicrosoft documents URI formats that invoke Remote Desktop clients with commands or preset attributes. The ms-rd scheme is documented for the Windows Desktop client, MSRDC. The legacy rdp scheme is documented for the macOS, iOS, and Android clients. [Microsoft Learn](https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/remote-desktop-uri).\n\n## Applicability\n\nIdentify the installed client and platform before publishing a launch link. Review the source attribute table for each target population. Keep the command being requested, the destination information, and platform support visible to the person reviewing the link.\n\n## DSE recommendation\n\nMaintain a small catalog of approved link patterns with their intended client, command, and parameter names. Use a nonproduction destination while building the pattern. Have a second reviewer inspect encoded values and the resulting destination before distribution. Avoid embedding sensitive material in a link merely because an attribute field exists. Provide a clear owner for correcting or retiring stale links.\n\n## Verification\n\nOpen each pattern on every supported managed client and record which application launches and which settings it receives. Test an unsupported client as a negative case and document the user-facing result. Confirm the destination before completing an authorized connection. Retest the catalog when the client application or platform changes.\n\n## Official references\n\n[Microsoft Learn: Remote Desktop URI scheme](https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/remote-desktop-uri). Source reviewed September 8, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260908-172-match-remote-desktop-launch-links-to-the-intended-client/", "url": "https://update.dsesecurity.com/updates/dse-20260908-172-match-remote-desktop-launch-links-to-the-intended-client/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-08" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260908-172-match-remote-desktop-launch-links-to-the-intended-client/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Match Remote Desktop launch links to the intended client", "item": "https://update.dsesecurity.com/updates/dse-20260908-172-match-remote-desktop-launch-links-to-the-intended-client/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260908-172-match-remote-desktop-launch-links-to-the-intended-client/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260908-172-match-remote-desktop-launch-links-to-the-intended-client/", "url": "https://update.dsesecurity.com/updates/dse-20260908-172-match-remote-desktop-launch-links-to-the-intended-client/", "headline": "Match Remote Desktop launch links to the intended client", "description": "Which Remote Desktop URI scheme can a managed client actually interpret?", "abstract": "Which Remote Desktop URI scheme can a managed client actually interpret?", "articleBody": "Source facts\nMicrosoft documents URI formats that invoke Remote Desktop clients with commands or preset attributes. The ms-rd scheme is documented for the Windows Desktop client, MSRDC. The legacy rdp scheme is documented for the macOS, iOS, and Android clients. Microsoft Learn.\nApplicability\nIdentify the installed client and platform before publishing a launch link. Review the source attribute table for each target population. Keep the command being requested, the destination information, and platform support visible to the person reviewing the link.\nDSE recommendation\nMaintain a small catalog of approved link patterns with their intended client, command, and parameter names. Use a nonproduction destination while building the pattern. Have a second reviewer inspect encoded values and the resulting destination before distribution. Avoid embedding sensitive material in a link merely because an attribute field exists. Provide a clear owner for correcting or retiring stale links.\nVerification\nOpen each pattern on every supported managed client and record which application launches and which settings it receives. Test an unsupported client as a negative case and document the user-facing result. Confirm the destination before completing an authorized connection. Retest the catalog when the client application or platform changes.\nOfficial references\nMicrosoft Learn: Remote Desktop URI scheme. Source reviewed September 8, 2026.", "datePublished": "2026-09-08T18:14:19+00:00", "dateModified": "2026-09-08T18:26:31+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260908-172-match-remote-desktop-launch-links-to-the-intended-client/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260908-172-match-remote-desktop-launch-links-to-the-intended-client/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Match Remote Desktop launch links to the intended client" }, "articleSection": [ "IT", "Networks & Infrastructure" ], "keywords": [ "IT", "Networks & Infrastructure", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 204, "timeRequired": "PT1M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Remote Desktop URI scheme", "url": "https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/remote-desktop-uri" } } ] } }