Hello Rich Leon,
It is usual that environmental settings are greyed out and in different setting when GPO is applied. Basically the system just ignores them as there is a superior authority that controls the setting (GPO). So the fact that it shows Off doesnt mean that is still Off.
You can use two tools for determining if your setting is correct.
- From one side, check if the GPO is applied properly with GPRESULT /H OUTPUT.HTML (the file will contain a description of policies applied successfully or failed)
- Run the next PS commandline to determine the real status of RDP on the system's WIM:
Get-CimInstance -Namespace "root\cimv2\TerminalServices" -Class win32_terminalservicesetting | select ServerName, AllowTSConnections
I would think that those would come correct due to your experience, check the next:
- Run a clean boot to discard 3rd party apps interference, specially antivirus: https://support.microsoft.com/en-us/topic/how-to-perform-a-clean-boot-in-windows-da2f9573-6eec-00ad-2f8a-a97a1807f3dd
- Check the type of Network that is configured in the Network and Sharing Center. If the computer shows "Publich Network" the RDP functionality will be blocked for security of exposure.
- Check your firewall settings: Open the start menu and type “Allow an app through Windows firewall.” Alternatively, navigate to Control Panel > System and Security > Windows Defender Firewall > Allowed apps. Look for a button called “Change Settings” on the right-hand top corner of the page and click it. Ensure that RemoteDesktop is ticked.
-Add the RDGClientTransport Key:
In this option, you’ll be tweaking the registry key to force the RDP to use RPC/HTTP connections instead of HTTP/UDP connection:
Press Windows + R to open run and type Regedit. Press the Enter key.
Navigate to HKEY_CURRENT_USER > Software > Microsoft > Terminal Server Client.
Navigate to the right-hand pane, right-click, and choose New > DWORD (32-bit value).
Name this option as “RDGClientTransport.”
Double-click this newly-created file. Its properties will open, and here, look for an option to set the value data. Enter the value 1. Click OK and close the Windows registry.
Hope it helps.
--If the reply is helpful, please Upvote and Accept as answer--