How to Disable Remote Desktop When You Are Not Using It

What Causes This?

Remote Desktop Protocol (RDP) is often left enabled after someone finishes remote work, troubleshooting, or setting up a PC. When it stays on, your computer continues listening for remote connection attempts, which increases exposure to password attacks, unauthorized access attempts, and unnecessary open services. This is especially risky on PCs that do not need remote access every day or are connected to less trusted networks.

Common Symptoms

• Remote Desktop is turned on even though you do not use it anymore
• You notice failed sign-in attempts or security warnings in Windows
• Your PC appears to allow remote connections from other devices
• A security scan or IT checklist flags RDP as enabled
• You want to reduce attack surface on a home or office PC

How to Fix It Manually

1. Turn off Remote Desktop in Settings

   1. Press Windows + I to open Settings.
   2. Click System.
   3. Scroll down and select Remote Desktop.
   4. Turn Remote Desktop to Off.
   5. Confirm the prompt if Windows asks you to verify the change.

2. Double-check in Advanced system settings

   1. Press Windows + R, type SystemPropertiesRemote, and press Enter.
   2. In the Remote tab, look under Remote Desktop.
   3. Select Don't allow remote connections to this computer.
   4. Click Apply, then OK.

3. Make sure Remote Assistance is also disabled

   1. In the same Remote tab, look for Remote Assistance.
   2. Uncheck Allow Remote Assistance connections to this computer if it is enabled.
   3. Click Apply and OK.

4. Check that the Remote Desktop service is not running unnecessarily

   1. Press Windows + R, type services.msc, and press Enter.
   2. Find Remote Desktop Services in the list.
   3. If it is running and you do not use RDP, right-click it and choose Stop.
   4. Double-click it and review Startup type. If you want to prevent it from starting automatically, set it to Manual or Disabled.
   5. Click Apply and OK.

5. Block Remote Desktop through Windows Firewall if needed

   1. Press Windows + S, type Windows Defender Firewall, and open it.
   2. Click Allow an app or feature through Windows Defender Firewall.
   3. Click Change settings.
   4. Look for Remote Desktop in the list.
   5. Uncheck it for the network types you use, or remove the allowance if appropriate.
   6. Click OK.

6. Confirm the port is no longer listening

   1. Press Windows + X and choose Terminal or Command Prompt.
   2. Run:

      netstat -an | findstr :3389

   3. If nothing is returned, the default RDP port is no longer listening.
   4. If you still see port 3389 listening, restart the PC and check again.

7. Restart your PC

   1. Save your work.
   2. Click Start > Power > Restart.
   3. After restart, go back to Settings > System > Remote Desktop and confirm it is still off.

Fix It Automatically with Kudu

Kudu can scan your PC for hardening issues like Remote Desktop being left enabled, unnecessary remote access settings, and other security-related misconfigurations. Instead of checking multiple Windows menus by hand, you can use Kudu to review the system and apply safer settings faster.

Download Kudu Free →