Always prompt for password upon connection
This `REG_DWORD` value controls whether the Remote Desktop Session Host prompts users for their password again when they establish a Remote Desktop connection.
since 0.9.8.11
Purpose
Show registry keys (1)
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\fPromptForPassword
This REG_DWORD value controls whether the Remote Desktop Session Host prompts users for their password again when they establish a Remote Desktop connection.
A value of 1 enables the policy. Users cannot then sign in automatically with a password that was entered or supplied through the Remote Desktop Connection client. They must enter the password at the additional sign-in prompt.
A value of 0 disables the policy and allows Remote Desktop Services to use a client-supplied password for automatic logon. If the value is absent, this policy does not specify automatic-logon behavior at the Group Policy level.
Notes
Security
Requiring another password entry prevents a password supplied by the Remote Desktop client from being sufficient for immediate automatic logon. This can reduce the risk of an unattended connection being established with credentials available to the client.
The setting does not prevent the client from saving passwords; that behavior is controlled by the separate “Do not allow passwords to be saved” policy. It also does not provide a second authentication factor or modify Network Level Authentication, RDP encryption, or the access rights of the account being used.
Possible side effects
The interactive password prompt can interfere with unattended sign-in and automation. Microsoft specifically documents that, under certain conditions, Power Automate for desktop cannot create an unattended session on a Microsoft Entra device when fPromptForPassword is set to 1.
Other workflows that depend on automatic logon with credentials supplied by the Remote Desktop client likewise require user interaction.
Notes
This is a computer policy that takes effect on the destination computer providing the Remote Desktop session. Other authentication policies and connection conditions can cause credential prompts independently of this setting.
Microsoft documentation
Microsoft Learn: RemoteDesktopServices Policy CSP – PromptForPasswordUponConnection