Remote Desktop Services - Disable RPC calls from another machine

gabriel sztejnworcel 31 Reputation points
2020-11-21T21:52:05.63+00:00

Hi,

Is it possible to disable Remote Desktop Services RPC calls from remote machines?
I'm referring to the "Terminal Services Terminal Server Runtime Interface Protocol":
https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-tsts/1eb45af1-94f1-4c42-9e13-dd0a018646fd
I know that by blocking port 445 I can block these calls, but it will block all SMB communication.

Thanks,
Gabriel

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,127 questions
Windows API - Win32
Windows API - Win32
A core set of Windows application programming interfaces (APIs) for desktop and server applications. Previously known as Win32 API.
2,422 questions
Remote Desktop
Remote Desktop
A Microsoft app that connects remotely to computers and to virtual apps and desktops.
4,244 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jenny Yan-MSFT 9,321 Reputation points
    2020-11-23T02:43:34.357+00:00

    Hi,
    Why would you looking for method to disable RPC service?

    Many system components are dependent on this service and as a result, some Windows procedures don't work if the Remote Procedure Call service is disabled.
    https://learn.microsoft.com/en-us/troubleshoot/windows-client/performance/disable-rpc-service-windows-process-not-work

    ----------

    Hope this helps and please help to accept as Answer if the response is useful.

    Best Regards,
    Jenny

  2. Obaid Farooqi MSFT 511 Reputation points Microsoft Employee
    2021-01-05T05:02:33.503+00:00

    Hi Gabriel:
    Please ignore the reply from @Hung-Chun Yu above.
    The purpose of @openspec-* tags is to support implementers using open specifications to develop interoperability solutions with Windows. The open specifications are found at https://learn.microsoft.com/en-us/openspecs/
    Your question is about configuration and the tags that your original post had were correct. I have removed the openspecs-windows tag.

    Regards,
    Obaid Farooqi - MSFT

    0 comments