RDP

In the Ultra Transcenders books

AZ-305AZ-104AZ-700SC-500SC-900SC-200SC-300AZ-802SC-401ALZ

Each book explains RDP in context, with comparison tables and the common traps.

Terms in this definition

• OVER

  Gives a T-SQL window function its window: PARTITION BY, ORDER BY and, if wanted, a ROWS or RANGE frame. Rankings and running totals can then be worked out while every row is kept.

• Azure Bastion

  Managed service that lets you open RDP and SSH sessions from the portal over TLS on port 443, so VMs need no public IP. Just-in-time VM access differs in that it opens ports 3389 and 22.

• TLS

  Transport Layer Security, the encryption protocol for traffic like HTTPS and Bastion sessions over port 443. On a storage account, minimumTlsVersion fixes the oldest accepted version without opening any network access.

Related terms

• az network bastion

  Group of Azure CLI commands (rdp, ssh and tunnel) for reaching VMs through Bastion; for example, az network bastion rdp starts mstsc against a machine that has no public IP address.

• Azure Serial Console

  Lets you reach a VM's COM1 port as text from the portal, including the Special Administration Console, even with RDP or networking broken; requires boot diagnostics.

• Enhanced session mode

  A VMConnect mode in Hyper-V that runs over RDP, giving a virtual machine's console window resizing, a shared clipboard, sound and redirection of local devices.

• Microsoft Azure Windows Virtual Machine Sign-in

  To control RDP sign-ins with Microsoft Entra credentials to Azure Windows VMs, Conditional Access policies point at this enterprise app, which may also be named Azure Windows VM Sign-In. Anyone signing in also needs either the Virtual Machine User Login or Administrator Login role.

• ML Behavior Analytics

  A preview Microsoft Sentinel analytics rule type, which cannot be customised, that applies Microsoft's own machine learning models to user history, geolocation and IP data to spot unusual RDP and SSH sign-ins.

• mstsc

  The Remote Desktop Connection client built into Windows. By itself it cannot connect to a VM lacking a public IP, but az network bastion rdp launches it via Azure Bastion.

• Native client support

  Azure Bastion option, on Standard tier and above, that allows az network bastion rdp and ssh to connect using a client installed locally, mstsc for example.

• Remote Desktop Gateway

  Lets people outside reach internal desktops without opening port 3389, by carrying RDP inside HTTPS on TCP 443. A Remote Desktop Services role.