How to check if the windows device have open the RDP port on them via Intune? Is there any policy or settings available from the same?

Question

How to check if the windows device have open the RDP port on them via Intune? Is there any policy or settings available from the same?

Answer 1

@Vinod Survase,Thanks for posting in Q&A.

From your description, I know that you want to check if the windows device has opened the RDP port on them via Intune.

Based on my research, there is no direct policy or setting in Intune to check is the devices have open RDP port on them. However, if you want to disable or enable it, here are two links you can refer to make it.

https://www.prajwaldesai.com/disable-remote-desktop-access-using-intune/

https://learn.microsoft.com/en-us/answers/questions/185374/enable-rdp-via-intune

Hope this can be helpful.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

OK, Then you can follow the below steps: https://cloudinfra.net/enable-disable-remote-desktop-access-using-intune/

1. Sign in to the Intune admin center
2. Go to Devices > Configuration Profiles
3. Click on Create > New Policy
4. Platform - Windows 10 and later
5. Profile type - Settings Catalog

• Basics Tab: Provide a Name and Description
• Configuration settings: Click on + Add settings.
• Search for "Allow users to connect remotely by using Remote Desktop Services"
• Select "Allow users to connect remotely by using Remote Desktop Services"
• Keep it at Disabled state.
• Assign this profile to an Entra security group containing devices on which you want to disable Remote Desktop Access.

Via Registry

You can also block access to the RDP port on Windows devices by using registry key below:

1. Open Registry Editor
2. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server
3. Edit fSingleSessionPerUser and set its value to 1 to disable and 0 to Enable.

--If the response is helpful, please click "Accept Answer" and upvote it.--