8 Replies Latest reply on Jan 28, 2008 6:52 PM by Bill Robinson

    RDP encryption levels

      Our client has asked us to provide them proof that RDP server encryption levels are set to "high". So far I can get a vbs script to pull the encryption level from a wintel server locally. Here is the script that we came up with:

      strComputer = "."

      Set objWMIService = GetObject("winmgmts:
      " & strComputer & "\root\cimv2")


      set colItems = objWMIService.ExecQuery("Select MinEncryptionLevel from Win32_TSGeneralSetting", , 48)

      For Each objItems in colItems

      Select Case objItems.MinEncryptionLevel

      Case 1

      strTSEncrypt = "Low level of encryption"

      Case 2

      strTSEncrypt = "Client compatible level of encryption"

      Case 3

      strTSEncrypt = "High level of encryption"

      Case 4

      strTSEncrypt = "FIPS compliant encryption"

      End Select


      msgbox strTSEncrypt,,"RDP Encryption"


      We would like to be able to make this into an extended object in order to run a compliance job.


      Any suggestions?