Prevent User Logs Recorded Locally in RDS Session Closure on Windows 11 Pro
Two Personal Computers (PCs) are in use, one placed in the office, and the other one at home. The user logs into the office PC using Remote Desktop Protocol (RDP) to access the office resources. However, the user wants to ensure that no user logs are recorded locally on the home PC when the RDP session is closed.
Understanding RDP Session Closure and User Logs
When an RDP session is closed, the user's interactive session on the remote computer ends, and the resources are released. However, the user logs generated during the session are not necessarily deleted or cleared from the local machine where the RDP client is installed. These logs can be used to track user activities, including keystrokes, mouse movements, and application usage.
Preventing User Logs on the Local Machine
To prevent user logs from being recorded locally on the home PC when the RDP session is closed, follow these steps:
Method 1: Group Policy Settings
If the home PC is part of a domain, you can use Group Policy settings to configure the RDP client to delete the logs on session disconnect. Follow these steps:
- Open the Group Policy Editor.
- Navigate to Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security.
- Double-click on the "Delete user data when user logs off" policy.
- Set the policy to "Enabled".
Method 2: Registry Editor
If the home PC is not part of a domain, you can use the Registry Editor to configure the RDP client to delete the logs on session disconnect. Follow these steps:
- Press the "Win + R" keys to open the Run dialog box.
- Type "regedit" and press Enter.
- Navigate to HKEY_CURRENT_USER\Software\Microsoft\RDP Client\LocalHost\Desktop.
- Right-click on an empty area and select "New" > "DWORD (32-bit) Value".
- Name the new value "DeleteOnLogoff".
- Double-click on the "DeleteOnLogoff" value and set its value to "1".
To prevent user logs from being recorded locally on the home PC when the RDP session is closed, you can use Group Policy settings or the Registry Editor to configure the RDP client to delete the logs on session disconnect.