Internal RDP vs Self-Hosted RustDesk
Hi everyone, I am looking for some guidance and real-world experiences around choosing the best approach for remote access in a Windows environment. Right now, we are considering two main options: - Continue using Microsoft Remote Desktop Protocol (RDP), but strictly for internal use only (no direct exposure to the public internet). - Deploy a self-hosted instance of RustDesk as an alternative or complement to RDP for remote access and remote support. Our main concern is security. RDP has historically been a common attack vector, especially when exposed externally or misconfigured, and we want to avoid introducing unnecessary risk to our endpoints. Even if we restrict RDP to internal networks or VPN-only access, we are still cautious about potential vulnerabilities, credential theft, lateral movement, and abuse of remote access. What we are trying to understand better is: 1. In environments where RDP is used only inside the LAN or over VPN (no open RDP from the internet), what are the recommended hardening practices and controls you would consider mandatory today? Examples might include: Network Level Authentication (NLA), strong account policies, just-in-time access, firewall restrictions, RDP Gateway, MFA, monitoring/logging, etc. 2. From a security and operational perspective, is it generally considered acceptable to keep RDP enabled only for internal administrative tasks, while avoiding using RDP for end-user remote support scenarios? 3. For those who have deployed self-hosted RustDesk (or similar remote support tools) in a Windows/Active Directory environment, how has it compared to RDP in terms of: - Security model (encryption, authentication, access control, exposure to the internet) - Ease of deployment and maintenance - User experience and performance - Logging, auditing, and integration with existing security monitoring 4. Are there any best practices or architectural patterns you would recommend when combining these approaches? For example: - Keeping RDP only on jump servers / bastion hosts inside the network - Using RustDesk (self-hosted) for remote support and helpdesk use cases - Enforcing least privilege, MFA, and strong authentication for all remote access paths - Segmentation and limiting which machines are even allowed to receive RDP connections 5. Have you encountered any specific security pitfalls, misconfigurations, or "gotchas" when relying on RDP internally or when rolling out RustDesk self-hosted that we should be aware of before committing to a design? Our goal is to design a remote access strategy that: - Minimizes attack surface and reduces the likelihood of compromise via remote access. - Separates administrative access from end-user remote support where it makes sense. - Remains manageable for a small IT/security team in terms of configuration, patching, and monitoring. If you have any references to Microsoft documentation, hardening guides, or community best practices for RDP (especially internal-only scenarios), as well as any detailed write-ups or lessons learned from using RustDesk self-hosted in production, those would be extremely helpful. Thank you in advance for any guidance, recommendations, or examples you can share. Best regards, Juan
Windows 11 24H2/25H2 System Freeze After January 2026 Updates – Lenovo ThinkPad G2
Dear Microsoft Support Team, We would like to raise a high-priority technical support case regarding a stability issue observed after installing the January 2026 cumulative updates on our Windows 11 devices. Environment Details: Device Model: Lenovo ThinkPad G2 (multiple units) OS Versions: Windows 11 24H2 and 25H2 Update Installed: January 2026 Patch Tuesday cumulative update (KB number can be provided) Deployment Method: WSUS / Intune / Windows Update (specify accordingly) BIOS Version: (Installed Latest available from Lenovo) Issue Description: After installing the January 2026 cumulative updates, devices intermittently experience a complete system freeze. The system becomes fully unresponsive: Mouse and keyboard input stop responding No BSOD is displayed Task Manager cannot be opened System recovery is only possible via hard reboot (power button) Frequency: The issue occurs randomly, both during active use and idle state. Multiple users across our environment are impacted. Troubleshooting Performed: Reinstalled OEM-certified Lenovo display drivers Disabled Fast Startup Ran SFC and DISM health checks (no integrity violations) Updated BIOS to latest version Setting power idle mode, then work normally Request: - Please confirm whether this is a known global issue under investigation. - Advise if any hotfix, Known Issue Rollback (KIR), or registry-based mitigation is available. - Provide guidance on additional diagnostic logging required at kernel or driver level. - Confirm whether crash dump analysis is recommended for this scenario. We are prepared to provide additional diagnostic logs, memory dumps, or reproduction steps upon request. Kindly treat this as a priority case due to multi-user impact in a production environment. Thank you for your support. #Windows11, #Windows 11 24H2, Windows Update, Cumulative Update, System Freeze, Lenovo ThinkPad, Display Driver, Enterprise
Cross-device clipboard not working on Windows 11 25H2 (Phone Link connected, sync enabled)
Hi everyone, I’m experiencing an issue with cross-device clipboard sync between my Windows 11 laptop (Version 25H2, Build 26200.7840) and a Samsung S25 Ultra. What is already working: Phone Link shows the phone as connected, Bluetooth pairing is successful, Clipboard history is enabled in Windows, Sync across devices is turned on with automatic sync selected, the option to allow this PC to access mobile devices is enabled under Settings → Bluetooth & devices → Mobile devices, the phone is signed in using the same Microsoft account, and cross-device copy and paste is enabled in Link to Windows on the phone. The problem: Even with all required settings enabled, the phone does not appear under Mobile devices, copy and paste between the phone and PC does not work, and no errors are shown in Phone Link or Windows settings. Additional observations: The system is running Windows 11 25H2 (Build 26200+). Some legacy sync services used in older builds are no longer present. This appears to be a device registration or cross-device platform issue rather than a configuration mistake. Troubleshooting already attempted: Re-linking Phone Link from scratch, signing out and back into the Microsoft account on both devices, clearing Link to Windows app data on Android, restarting related Windows services and rebooting both devices, verifying clipboard sync settings multiple times, and installing the latest Windows updates available for this build. None of these steps resolved the issue. Question: Is this a known issue with Windows 11 25H2 / Build 26200+ that affects cross-device clipboard registration? If anyone has a confirmed fix, registry or feature-flag workaround, or official confirmation from Microsoft, I would really appreciate the guidance. This could also help others using newer Windows builds. Thanks in advance.
Clipboard History does not recognize the Delete key on Windows 11
I recently moved to Windows 11 (installed from scratch), and as soon as it was ready I activated the Clipboard History with the Win+V shortcut, since I really liked this feature on Windows 10. But after a short while I noticed the Windows 11 Clipboard History does not recognize the Delete key anymore. On Windows 10 this works: - Invoke the Clipboard History with Win+V - Scroll to the entry you want to delete with your arrow keys - Hit Delete on your keyboard and that entry will be removed from the history. Clipboard History remains open so you can repeat this for as many entries as you like. On Windows 11: - Invoke the Clipboard History with Win+V - Scroll to the entry you want to delete with your arrow keys - Hit Delete on your keyboard, then the Clipboard History closes with no error or message. If you invoke the Clipboard History again, the entry is still there. So apparently there are only two options on Windows 11 now, use the "Clear all" button to remove all the entries from the history. Or click the 3 dots next to each entry you want to remove and then click Delete, which is... annoying if compared to Windows 10. Is there a way to make the Delete key work again?DESIGNER only mkes 1 design not 4
I use ms ai image designer to make images and i makew ai videos ,, but for a week now it only makes 1 image not 4,, and it doesnt follow the propsat as per usual,. and it makes images in 3:2 not 16:9. I updateed my subscription for this tool and depend onm it.. SO please help me fix this
Where / How to find "Ask a question"
CAN ANYONE TELL ME how to reliably and repeatably find the Link to "Ask a question" or "Start a Discussion"! Yes, I am Starting a Discussion now ONLY because I accidentally stumbled upon a Start a discussion link. I am often wondering around in the various Community Hubs, Discussions, Screens, etc. trying to find that link - and don't laugh because I am serious, but sometimes for 30 minutes or more and sometimes finally giving up. I love the Community and the support here, but WHY is it so hard to "Ask a Question" I will post the question somewhere else when I finish here - if I can once again find the link to ask a question. And sorry to be such a pain over this and although a long-term Community participant, but this has been a lingering problem for me, going back years and years. ron in shawnee
Windows narrator keeps turning on.
I just completed 2 windows updates this morning and since then, when the computer "goes to sleep" and I wake it, the narrator program starts to run. I shut it off but it will turn back on the next time it goes to sleep again. I checked the task manager/start up and narrator is not listed in there. I'm running Windows 11 and any advice would be greatly appreciated. Thanks in advance.
How can I easily install pending Windows updates on my PC?
Call 1-855-535-7109. To install pending Windows updates easily on your Windows PC, follow these steps: Open Windows Settings: Press Windows + I to quickly open the Settings menu. Go to Update & Security: In the Settings window, select Update & Security. Check for Updates: Under the Windows Update section, click Check for updates. Windows will search for any pending updates. Install Updates: If updates are available, click on Install to begin the installation process. Windows will automatically download and install the updates. Restart Your Computer: After updates are installed, a restart may be required. Windows will prompt you to restart, or you can manually restart your PC. Use Windows Update Troubleshooter (if issues occur): If updates aren’t installing properly, try using the Windows Update Troubleshooter. Go to Settings > Update & Security > Troubleshoot > Additional troubleshooters, then select Windows Update and run the troubleshooter.Unable to delete a directory on windows 11 - my solution
It's crazy, I couldn't delete 2 empty directories for the life of me. I tried ALL of the solutions, believe me. Hours. Redgedits, Reboots, Remove Empty Directories, too many solutions to list. I recall messages that the file wasn't found, or moved to a different locarion, and other errors that I cannot recall. Then I gave up and just for the h3ll of it, got on my android tablet, and used my file app (Luckfick File Manager} and I accessed the share that my directories that I couldn't delete on my Windows 11 machine, and I deleted them from the android app. Not trusting my eyes, I ran to the PC and lo and behold - the directories in File Explorer were gone!!!! I think that they contained a funky character " ) " (Parentheses) - Screenshot of file in Recycle Bin below. So, whatever you are using Android, or maybe APPLE, you can try this with your file app, it obviously has to have access to SMB shares and the directory must be shared SMB, and it may work. Let me know.The New Start Menu Is a Perfect Example of Microsoft Forcing Unwanted “Features” on Users
I’m posting this because I’m beyond fed up with the direction Microsoft is taking with Windows, and the latest Start Menu redesign is really unwelcomed. Whoever decided to implement the new “All” section with forced Categories, Grid/List views, and a permanently attached app list seems to have completely forgotten something fundamental: this is my Start Menu, not theirs. I’ve already turned off every bit of clutter I can — Recommended, recent files, “suggestions,” all of it. Yet Windows still insists on injecting an enormous block of UI I never asked for and will never use. I don’t care whether it’s Categories, List, or Grid. I don’t want any of it. I want the Start menu to show ONLY the pinned items I chose, nothing else, the same way it worked for years. But now? Microsoft has deliberately removed the ability to collapse, hide, disable, or eliminate this lower “All” section entirely. It wastes space, disrupts workflow muscle memory, and provides zero value for users who already know exactly what they need. It’s an unwanted visual and functional takeover of the one UI element that should be the most personal and customizable. This is exactly the type of “change for the sake of change” that pushes long‑time Windows users away. It feels like decisions are being made by people who never actually use Windows for real work, and who believe their design experiments matter more than respecting users’ preferences. I’m tired of being forced into UI experiments I never opted into. I’m tired of updates that remove more choice than they add. And I’m tired of Microsoft ignoring the most universal feedback users keep giving: Stop shoving new UI elements in our faces and give us back full control over our own operating system. If Microsoft wants people to stay enthusiastic about Windows instead of increasingly frustrated with every forced redesign, then we need true user‑controlled customization — not “pick between three unwanted layouts,” not “view modes,” not scripts, not policies, not third‑party hacks. Just a simple, basic ability to hide what we don’t want. Give us the Start Menu we choose, not the Start Menu you decide we should have.
