Microsoft recently introduced enhanced security warnings for Remote Desktop (RDP) files as part of an April 2026 update. These warnings appear when users open an
.rdp file – including RemoteApp shortcuts – and are designed to protect against malicious RDP files often used in phishing attacks.Why the Warnings Exist
Attackers sometimes send harmful RDP files through email. If opened, these files can silently connect a user to an attacker‑controlled server and request access to local resources like drives, clipboard, camera, or credentials. The new warnings help users spot suspicious files before any connection is made.
What Customers Will See
When launching an RDP or RemoteApp shortcut for the first time after the update has been installed, a new dialog will appear once asking for your acknowledgement:
Following this dialog box, each time you launch an RDP file or RemoteApp shortcut, users now see a security warning dialog showing:
- The remote computer name
- Whether the file’s publisher can be verified
- Which local resources (if any) the file wants to access
All resource redirections are off by default, and users must explicitly allow them. An example of the security dialog is shown below:
Why Crestwood Cloud RemoteApp Shortcuts Are Safe
Crestwood Cloud RemoteApp shortcuts:
- Are delivered directly by Crestwood – not through email or unknown sources
- Connect only to trusted, secured Crestwood Cloud servers
- Do not request dangerous redirections like Smart cards or cameras
- Are part of a managed environment where connections and publishers are controlled
Because of this, the new Microsoft warnings are expected, normal, and not an indication of risk. They simply reflect Microsoft’s broader effort to educate users about unsafe RDP files.
What Customers Should Do
When launching a Crestwood Cloud RemoteApp shortcut:
- Review the dialog
- Confirm the publisher and server name match Crestwood Cloud
- Choose which resources you’ll need when using your Crestwood Cloud RemoteApps – typically Clipboard and Printers, but you may want to connect your local Drives as well.
- Proceed with the connection
If a user ever receives an unexpected RDP file via email or the internet, they should not open it and should contact IT immediately.
Get Your Free ERP Assessment | Explore Our Services | Learn More About Crestwood
Connect With Us: X | LinkedIn | Contact Us
More Resources: Acumatica ERP | Business Central | Blog Home
© 2025 Crestwood Associates. All rights reserved.
