Fix Remote Desktop Security Warning 0x80004005 – Windows 10/11 2026

This method allows you to safely connect using unsigned RDP files by manually verifying the connection details.

1. When the security warning appears, carefully examine the Remote computer field to ensure it matches your expected destination
2. Verify the IP address or computer name corresponds to your intended target system
3. In the security dialog, check only the local resources you actually need:
   • Clipboard - for copy/paste between local and remote systems
   • Drives - only if you need file transfer capabilities
   • Printers - if you need to print from the remote session
4. Leave all other options unchecked to minimize security exposure
5. Click Connect to proceed with the verified settings
6. If prompted with additional warnings, click Yes only if you trust the remote computer

Configure Windows to trust specific publishers or disable publisher verification for internal RDP files.

1. Press Windows + R, type gpedit.msc, and press Enter
2. Navigate to Computer Configuration → Administrative Templates → Windows Components → Remote Desktop Services → Remote Desktop Connection Client
3. Double-click Configure trusted RDP publishers
4. Select Enabled and add your organization's code signing certificate thumbprints in the text field
5. Alternatively, locate Prompt for credentials on the client computer and set to Disabled for internal networks
6. Open Command Prompt as Administrator and run:

   gpupdate /force

7. Restart the Remote Desktop Connection application

Apply digital signatures to RDP files to eliminate security warnings and establish publisher trust.

1. Obtain a code signing certificate from a trusted Certificate Authority (CA) like DigiCert, Sectigo, or your internal CA
2. Install the certificate in the local machine certificate store:

   Import-Certificate -FilePath "C:\path\to\certificate.p12" -CertStoreLocation Cert:\LocalMachine\My

3. Use SignTool from Windows SDK to sign your RDP files:

   signtool sign /fd SHA256 /t http://timestamp.digicert.com /n "Your Certificate Name" "connection.rdp"

4. Verify the signature was applied successfully:

   Get-AuthenticodeSignature -FilePath "connection.rdp"

5. Distribute the signed RDP files to users
6. For bulk signing, create a PowerShell script:

   $rdpFiles = Get-ChildItem -Path "C:\RDPFiles" -Filter "*.rdp"
   foreach ($file in $rdpFiles) {
       & signtool sign /fd SHA256 /t http://timestamp.digicert.com /n "Your Certificate Name" $file.FullName
   }

Disable the enhanced security warnings through registry modification for trusted environments.

1. Press Windows + R, type regedit, and press Enter
2. Navigate to HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client
3. Create a new DWORD value named DisableRDPSecurityWarnings:

   HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client
   DisableRDPSecurityWarnings = 1 (DWORD)

4. For system-wide application, also modify:

   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Terminal Server Client
   DisableRDPSecurityWarnings = 1 (DWORD)

5. Create additional registry entry to bypass publisher verification:

   HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client
   BypassPublisherCheck = 1 (DWORD)

6. Restart the computer or log off and back on for changes to take effect
7. Test with a PowerShell command to verify registry changes:

   Get-ItemProperty -Path "HKCU:\Software\Microsoft\Terminal Server Client" -Name "DisableRDPSecurityWarnings"

Add RDP file locations to Windows Defender SmartScreen exclusions to prevent security warnings.

1. Open Windows Security from the Start menu
2. Navigate to App & browser control → Reputation-based protection settings
3. Click Add or remove exclusions under SmartScreen settings
4. Add exclusions for your RDP file directories:
   • Click Add an exclusion → Folder
   • Browse to your RDP files directory (e.g., C:\Company\RDPFiles)
   • Confirm the exclusion
5. For PowerShell automation, use Windows Defender cmdlets:

   Add-MpPreference -ExclusionPath "C:\Company\RDPFiles"
   Add-MpPreference -ExclusionExtension ".rdp"

6. Verify exclusions are active:

   Get-MpPreference | Select-Object -ExpandProperty ExclusionPath

7. Configure additional SmartScreen bypass for trusted internal domains:

   Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\yourdomain.com" -Name "*" -Value 1