[{"data":1,"prerenderedAt":306},["ShallowReactive",2],{"en-post-62":3},{"id":4,"title":5,"body":6,"description":12,"extension":299,"meta":300,"navigation":301,"path":302,"seo":303,"stem":304,"__hash__":305},"content/post/62.md","62",{"type":7,"value":8,"toc":286},"minimark",[9,13,18,21,31,34,38,61,65,68,79,83,118,122,236,240,243,265,269,272,276,279,283],[10,11,12],"p",{},"The built-in Remote Desktop (based on the RDP protocol) is the most stable, smoothest, and completely free way to connect two fixed Windows machines. How is it different from ToDesk, Sunflower, or TeamViewer, how do you enable it, and what do you do when it will not connect? All covered here.",[14,15,17],"h2",{"id":16},"how-rdp-differs-from-remote-control-software","How RDP differs from remote control software",[10,19,20],{},"Set the positioning first:",[22,23,24,28],"ul",{},[25,26,27],"li",{},"RDP is native, free, smooth, and light. By default it works best on the same LAN; cross-network needs a tunnel. Only one person can operate at a time and it locks the other screen. Windows 11 Home cannot be remote-controlled (no allow switch).",[25,29,30],{},"ToDesk, Sunflower, and TeamViewer work across networks immediately, can control a phone, and support unattended access, but the free tier is throttled or ad-supported.",[10,32,33],{},"In short, use RDP for an office LAN or two home PCs; use ToDesk or Sunflower to help parents remotely or to control a PC from a phone.",[14,35,37],{"id":36},"enable-remote-desktop-on-pro-or-enterprise","Enable Remote Desktop on Pro or Enterprise",[39,40,41,44,52],"ol",{},[25,42,43],{},"Settings > System > Remote Desktop, turn on the switch (it confirms and adds a firewall exception automatically).",[25,45,46,47,51],{},"Or in ",[48,49,50],"code",{},"sysdm.cpl",", the Remote tab, check Allow remote connections to this computer (keep Allow connections only from computers running Network Level Authentication).",[25,53,54,55,60],{},"The controlled account must have a password (passwordless accounts cannot RDP in; set a password or switch to a local account, see ",[56,57,59],"a",{"href":58},"/post/55/","Switch a Microsoft Account to a Local Account",").",[14,62,64],{"id":63},"what-if-home-has-no-allow-remote-switch","What if Home has no allow remote switch",[10,66,67],{},"Windows 11 Home cannot be a host by default (it can be the client but not the controlled end). Three options:",[39,69,70,73,76],{},[25,71,72],{},"Upgrade to Pro. Settings > System > Activation > upgrade, the cleanest and legal path.",[25,74,75],{},"Use a third-party tool. ToDesk, Sunflower, or Quick Assist (Microsoft's built-in, the controlled side must accept, good for temporary help).",[25,77,78],{},"RDP Wrapper, a third-party patch that enables the RDP server on Home. It modifies system components and carries compatibility, security, and compliance risk, and Microsoft updates often revert it. Not recommended for non-technical users.",[14,80,82],{"id":81},"how-to-connect-client-side","How to connect (client side)",[39,84,85,96,99,102],{},[25,86,87,88,91,92,95],{},"Press ",[48,89,90],{},"Win + R",", type ",[48,93,94],{},"mstsc",", and press Enter to open Remote Desktop Connection, or install Windows App or Remote Desktop from the Microsoft Store.",[25,97,98],{},"In Computer, enter the target's LAN IP or hostname (same network); for cross-network enter the public IP or the tunneled address.",[25,100,101],{},"Enter the target's username and password and connect. On first connect it asks whether to trust the certificate; check Don't ask again and confirm.",[25,103,104,105,108,109,112,113,117],{},"To find the target IP, on the target run ",[48,106,107],{},"ipconfig"," and read IPv4; for the hostname run ",[48,110,111],{},"hostname",". For network discovery or sharing see ",[56,114,116],{"href":115},"/post/17/","Windows File and Printer Sharing on a Local Network",".",[14,119,121],{"id":120},"eight-reasons-it-will-not-connect-and-fixes","Eight reasons it will not connect, and fixes",[123,124,125,141],"table",{},[126,127,128],"thead",{},[129,130,131,135,138],"tr",{},[132,133,134],"th",{},"Symptom or error",[132,136,137],{},"Most likely cause",[132,139,140],{},"Fix",[142,143,144,156,167,178,189,200,211,225],"tbody",{},[129,145,146,150,153],{},[147,148,149],"td",{},"Computer not found or timeout",[147,151,152],{},"Target off, not on same network, wrong IP",[147,154,155],{},"Confirm target is on and pingable; use the correct LAN IP",[129,157,158,161,164],{},[147,159,160],{},"Remote Desktop not enabled",[147,162,163],{},"Target switch is off",[147,165,166],{},"Enable it in section two",[129,168,169,172,175],{},[147,170,171],{},"Credentials do not work, repeated prompts",[147,173,174],{},"Passwordless account, wrong username, Microsoft account needs email",[147,176,177],{},"Set a password; use email or hostname\\username",[129,179,180,183,186],{},[147,181,182],{},"Cannot connect to the remote computer",[147,184,185],{},"Firewall blocks 3389, network profile is Public",[147,187,188],{},"Allow Remote Desktop in target firewall; set network to Private",[129,190,191,194,197],{},[147,192,193],{},"NLA required but client does not support it",[147,195,196],{},"Newer builds force Network Level Authentication",[147,198,199],{},"Upgrade client; or temporarily relax NLA on target",[129,201,202,205,208],{},[147,203,204],{},"0xC000000D",[147,206,207],{},"Target has admin protection on, non-admin RDP fails",[147,209,210],{},"Temporarily turn off admin protection or wait for Microsoft",[129,212,213,216,219],{},[147,214,215],{},"Remote Desktop Services not running",[147,217,218],{},"Service disabled",[147,220,221,224],{},[48,222,223],{},"services.msc",", enable and start the service",[129,226,227,230,233],{},[147,228,229],{},"Black screen or drop",[147,231,232],{},"GPU driver or resolution negotiation",[147,234,235],{},"Update driver, lower remote resolution",[14,237,239],{"id":238},"cross-network-access-safety-first","Cross-network access, safety first",[10,241,242],{},"Do not map port 3389 directly to the public internet; that is a prime target for brute force. Recommendations:",[22,244,245,248,251,262],{},[25,246,247],{},"Build a virtual LAN with a tunnel such as Tailscale, ZeroTier, or Dandelion, then run RDP inside the virtual network, far safer than exposing 3389.",[25,249,250],{},"Keep a strong password and Network Level Authentication (NLA) on.",[25,252,253,254,257,258,261],{},"You can change the default port in the registry key ",[48,255,256],{},"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Terminal Server\\WinStations\\RDP-Tcp",", ",[48,259,260],{},"PortNumber",", but do not rely on port change as security.",[25,263,264],{},"For long-term exposure use a VPN or zero-trust solution; do not use a personal free channel for sensitive operations.",[14,266,268],{"id":267},"redirecting-audio-printers-and-drives","Redirecting audio, printers, and drives",[10,270,271],{},"During a remote session you are not limited to the screen. In the Remote Desktop client, under Show options > Local Resources, you can bring your local printers, clipboard, and even a mapped disk into the remote machine, which is handy for moving files without email. For audio, the client can play remote sound locally so a video on the host is heard on your end. Performance also depends on resolution and color depth; dropping to 1080p and 16-bit color on a weak connection keeps it responsive, and redirecting a large local drive over a slow link is slow, so copy what you need rather than mounting the whole disk.",[14,273,275],{"id":274},"using-remote-desktop-from-a-phone-or-a-mac","Using Remote Desktop from a phone or a Mac",[10,277,278],{},"You are not limited to a Windows client. Microsoft ships a free Remote Desktop app for macOS, iPhone, iPad, and Android, so you can reach your home or office PC from virtually any device. The setup is the same: enable RDP on the host, then in the app add the PC by its LAN IP or tunneled address and sign in with your account. On a phone the small screen means you should pick a lower resolution and rely on the on-screen trackpad; on a Mac the experience is close to native. The same security rules apply, so keep it inside a tunnel rather than opening 3389 to the internet.",[14,280,282],{"id":281},"summary","Summary",[10,284,285],{},"RDP is Windows built-in free high-performance remote access. Pro enables it in Settings with one switch; Home either upgrades or uses ToDesk, Sunflower, or Quick Assist. For connection failures, check the table top to bottom (switch, network, firewall, credentials, NLA, service). Never expose 3389 directly across the network; use a tunnel.",{"title":287,"searchDepth":288,"depth":288,"links":289},"",2,[290,291,292,293,294,295,296,297,298],{"id":16,"depth":288,"text":17},{"id":36,"depth":288,"text":37},{"id":63,"depth":288,"text":64},{"id":81,"depth":288,"text":82},{"id":120,"depth":288,"text":121},{"id":238,"depth":288,"text":239},{"id":267,"depth":288,"text":268},{"id":274,"depth":288,"text":275},{"id":281,"depth":288,"text":282},"md",{},true,"/post/62",{"description":12},"post/62","SmvRq09rraj2qckBhjasO2pTv446GUSjc7S-HUkDpuw",1794378304137]