Review an RDP file destination and redirections before connecting

Source facts

Microsoft says Remote Desktop Connection introduced additional warnings for RDP files with the April 2026 security update. An RDP file specifies the remote connection and may also redirect local resources such as drives, the clipboard, or a camera. Microsoft advises verifying unexpected files through another channel, checking the destination and publisher, and enabling only the redirections that are needed. Microsoft documentation.

Applicability

Use this review when opening a received or downloaded RDP file. Identify the expected remote computer and the person responsible for providing the connection. Treat a signed file as something to verify, not automatic approval to connect.

DSE recommendation

Give users an approved way to confirm the remote address without replying to the message that delivered the file. Document which local resources the business task actually needs. Ask support staff to explain each requested redirection before a user accepts it. Preserve suspicious files through the organization’s reporting process and have the responsible team decide whether the connection is legitimate.

Verification

Use a controlled example to confirm that users can identify the destination, publisher information, and requested local resources. Record whether unnecessary redirections remain disabled. Test the reporting route for an unexpected file and confirm that the responsible team receives enough context to investigate. Update the user instructions if the dialog or approved connection details change.

Official references

Microsoft Learn: Understanding security warnings when opening Remote Desktop (RDP) files. Source reviewed September 8, 2026.