Reusable .rdp Files for Your Windows VPS: Gateway, Credentials, and Display Settings

The Remote Desktop Protocol (RDP) client on Windows stores every connection as a plain-text .rdp file. Each file holds the full session definition: server address and port, user name, display resolution, audio and drive redirection, gateway settings, and optionally saved credentials. For anyone managing more than one Windows VPS instance, a small library of reusable .rdp profiles turns a repetitive login routine into a double-click operation.

This guide shows how to create, edit, and deploy .rdp files on Windows 10 and Windows 11, including the PowerShell steps that push profiles to several machines at once. If you have not picked a host yet, compare Windows VPS providers on our comparison table first so the connection settings below match the provider’s real RDP endpoint and gateway addresses.

What an .rdp File Actually Contains

An .rdp file is UTF-8 text with one setting per line in name:value format. The most useful settings for a VPS connection are:

  • full address:s: — the hostname or IP and port, for example 203.0.113.10:3389
  • username:s: — the account used to sign in
  • screen mode id:i:1 for full screen, 2 for windowed
  • desktopwidth:i: and desktopheight:i: — the session resolution
  • redirectclipboard:i:, redirectdrives:i:, redirectprinters:i: — local resource redirection
  • audiomode:i:0 play on remote, 1 play on local, 2 do not play
  • gatewayhostname:s: — the Remote Desktop Gateway used to reach the VPS
  • authentication level:i:0 always connect, 2 require Network Level Authentication

A minimal working profile looks like this:

full address:s:203.0.113.10:3389
username:s:Administrator
screen mode id:i:1
desktopwidth:i:1920
desktopheight:i:1080
redirectclipboard:i:1
redirectdrives:i:0
authentication level:i:2
prompt for credentials:i:1

Create a Baseline Profile in Remote Desktop Connection

Launch mstsc.exe, enter the VPS address in the Computer field, and type the user name. Before connecting, open the Display and Local Resources tabs and set the resolution and redirection options you want to keep as defaults. Then click Save As and give the profile a descriptive name such as web-server-01.rdp. The client writes the file to the Documents folder, and you can open it with any text editor to inspect or tweak individual settings.

One practical habit is to keep a separate baseline .rdp file per server role — IIS boxes, SQL Server, jump hosts — and to include the port in the filename when RDP runs on a non-standard port. Because the files are small and text-based, they version cleanly in Git alongside your server notes.

Add Remote Desktop Gateway and Authentication Settings

If the VPS sits behind a Remote Desktop Gateway — the recommended setup when you do not want to expose TCP 3389 to the internet — the profile must reference the gateway explicitly:

gatewayhostname:s:rdg.example.com
gatewayusagemethod:i:1
gatewaycredentialssource:i:0
promptcredentialonce:i:1
authentication level:i:2

gatewayusagemethod:i:1 forces the connection through the gateway for all traffic, while gatewaycredentialssource:i:0 asks for gateway credentials separately from the session credentials. With promptcredentialonce:i:1, the client reuses the credentials it collected for the gateway instead of prompting twice. When the gateway requires smart cards or a second factor, keep gatewaycredentialssource:i:1 (use the same credentials) and let the gateway handle the challenge.

Control Display, Audio, and Drive Redirection

The redirection settings in an .rdp file decide how much of your local machine the session can touch. For administrative VPS work the safe defaults are clipboard on, drives off, and printers off:

SettingValueEffect
screen mode id:i:1Full-screen session
redirectclipboard:i:1Share the clipboard both ways
redirectdrives:i:0Do not map local disks into the session
redirectprinters:i:0Do not map local printers
audiomode:i:2No audio redirection

Drive redirection is convenient for copying files, but it also gives any process on the VPS read access to the mapped volumes. On shared or lightly trusted servers, keep redirectdrives:i:0 and transfer files through a secure channel such as SMB or SFTP instead. If a specific machine genuinely needs disk mapping, create a separate profile with redirectdrives:i:1 and use it only for that machine.

Deploy Profiles to a Team with PowerShell

When several administrators manage the same fleet of Windows VPS instances, keep the .rdp files on a file share and sync them locally with a short script. The example below copies the profile set into each user’s Documents folder and logs the result:

$share = "\files01
dp-profiles"
$dest  = Join-Path $env:USERPROFILE "Documents"
robocopy $share $dest *.rdp /NJH /NJS /NP
if ($LASTEXITCODE -lt 8) { Write-Host "Profiles synced to $dest" }

For larger fleets, push the files with a scheduled task or a logon script applied through Group Policy, and name every profile with the server’s role and environment (for example iis-prod.rdp or sql-staging.rdp). Because the client remembers the last-used profile per server, keeping the filenames stable also prevents confusing duplicate entries in the saved-connections list.

Security Considerations for Saved Credentials

Adding savedcredentials:i:1 to a profile stores the password in Windows Credential Manager, encrypted with DPAPI and tied to the user account. That is convenient for a personal workstation, but do not distribute profiles that contain credentials — the encrypted blob does not travel with the file, and a shared profile with embedded credentials is a password leak waiting to happen. Keep shared profiles at savedcredentials:i:0, enforce Network Level Authentication with authentication level:i:2, and use an RD Gateway with MFA when the VPS holds anything sensitive. For short, high-risk sessions, mstsc.exe /restrictedAdmin launches a session without delegating your credentials to the remote host at all.

Summary

.rdp files are the most under-used productivity tool in Windows VPS administration: they standardize connection settings, remove typos from manual entry, and make server access reproducible for the whole team. Build a baseline profile, add gateway and redirection rules, version the files with your documentation, and deploy them with the PowerShell snippet above. Before you provision more servers, see the full specs and pricing on the Windows VPS comparison table so your connection strategy matches the provider’s network design.

Hostwinds offers Windows VPS plans with dedicated IPs and instant RDP access — check current Hostwinds Windows VPS pricing if you need a low-cost host for your profile library.

Leave a Comment