The Remote Desktop Protocol (RDP) client on Windows stores every connection as a plain-text .rdp file. Each file holds the full session definition: server address and port, user name, display resolution, audio and drive redirection, gateway settings, and optionally saved credentials. For anyone managing more than one Windows VPS instance, a small library of reusable .rdp profiles turns a repetitive login routine into a double-click operation.
This guide shows how to create, edit, and deploy .rdp files on Windows 10 and Windows 11, including the PowerShell steps that push profiles to several machines at once. If you have not picked a host yet, compare Windows VPS providers on our comparison table first so the connection settings below match the provider’s real RDP endpoint and gateway addresses.
What an .rdp File Actually Contains
An .rdp file is UTF-8 text with one setting per line in name:value format. The most useful settings for a VPS connection are:
full address:s:— the hostname or IP and port, for example203.0.113.10:3389username:s:— the account used to sign inscreen mode id:i:—1for full screen,2for windoweddesktopwidth:i:anddesktopheight:i:— the session resolutionredirectclipboard:i:,redirectdrives:i:,redirectprinters:i:— local resource redirectionaudiomode:i:—0play on remote,1play on local,2do not playgatewayhostname:s:— the Remote Desktop Gateway used to reach the VPSauthentication level:i:—0always connect,2require Network Level Authentication
A minimal working profile looks like this:
full address:s:203.0.113.10:3389
username:s:Administrator
screen mode id:i:1
desktopwidth:i:1920
desktopheight:i:1080
redirectclipboard:i:1
redirectdrives:i:0
authentication level:i:2
prompt for credentials:i:1
Create a Baseline Profile in Remote Desktop Connection
Launch mstsc.exe, enter the VPS address in the Computer field, and type the user name. Before connecting, open the Display and Local Resources tabs and set the resolution and redirection options you want to keep as defaults. Then click Save As and give the profile a descriptive name such as web-server-01.rdp. The client writes the file to the Documents folder, and you can open it with any text editor to inspect or tweak individual settings.
One practical habit is to keep a separate baseline .rdp file per server role — IIS boxes, SQL Server, jump hosts — and to include the port in the filename when RDP runs on a non-standard port. Because the files are small and text-based, they version cleanly in Git alongside your server notes.
Add Remote Desktop Gateway and Authentication Settings
If the VPS sits behind a Remote Desktop Gateway — the recommended setup when you do not want to expose TCP 3389 to the internet — the profile must reference the gateway explicitly:
gatewayhostname:s:rdg.example.com
gatewayusagemethod:i:1
gatewaycredentialssource:i:0
promptcredentialonce:i:1
authentication level:i:2
gatewayusagemethod:i:1 forces the connection through the gateway for all traffic, while gatewaycredentialssource:i:0 asks for gateway credentials separately from the session credentials. With promptcredentialonce:i:1, the client reuses the credentials it collected for the gateway instead of prompting twice. When the gateway requires smart cards or a second factor, keep gatewaycredentialssource:i:1 (use the same credentials) and let the gateway handle the challenge.
Control Display, Audio, and Drive Redirection
The redirection settings in an .rdp file decide how much of your local machine the session can touch. For administrative VPS work the safe defaults are clipboard on, drives off, and printers off:
| Setting | Value | Effect |
|---|---|---|
screen mode id:i: | 1 | Full-screen session |
redirectclipboard:i: | 1 | Share the clipboard both ways |
redirectdrives:i: | 0 | Do not map local disks into the session |
redirectprinters:i: | 0 | Do not map local printers |
audiomode:i: | 2 | No audio redirection |
Drive redirection is convenient for copying files, but it also gives any process on the VPS read access to the mapped volumes. On shared or lightly trusted servers, keep redirectdrives:i:0 and transfer files through a secure channel such as SMB or SFTP instead. If a specific machine genuinely needs disk mapping, create a separate profile with redirectdrives:i:1 and use it only for that machine.
Deploy Profiles to a Team with PowerShell
When several administrators manage the same fleet of Windows VPS instances, keep the .rdp files on a file share and sync them locally with a short script. The example below copies the profile set into each user’s Documents folder and logs the result:
$share = "\files01
dp-profiles"
$dest = Join-Path $env:USERPROFILE "Documents"
robocopy $share $dest *.rdp /NJH /NJS /NP
if ($LASTEXITCODE -lt 8) { Write-Host "Profiles synced to $dest" }
For larger fleets, push the files with a scheduled task or a logon script applied through Group Policy, and name every profile with the server’s role and environment (for example iis-prod.rdp or sql-staging.rdp). Because the client remembers the last-used profile per server, keeping the filenames stable also prevents confusing duplicate entries in the saved-connections list.
Security Considerations for Saved Credentials
Adding savedcredentials:i:1 to a profile stores the password in Windows Credential Manager, encrypted with DPAPI and tied to the user account. That is convenient for a personal workstation, but do not distribute profiles that contain credentials — the encrypted blob does not travel with the file, and a shared profile with embedded credentials is a password leak waiting to happen. Keep shared profiles at savedcredentials:i:0, enforce Network Level Authentication with authentication level:i:2, and use an RD Gateway with MFA when the VPS holds anything sensitive. For short, high-risk sessions, mstsc.exe /restrictedAdmin launches a session without delegating your credentials to the remote host at all.
Summary
.rdp files are the most under-used productivity tool in Windows VPS administration: they standardize connection settings, remove typos from manual entry, and make server access reproducible for the whole team. Build a baseline profile, add gateway and redirection rules, version the files with your documentation, and deploy them with the PowerShell snippet above. Before you provision more servers, see the full specs and pricing on the Windows VPS comparison table so your connection strategy matches the provider’s network design.
Hostwinds offers Windows VPS plans with dedicated IPs and instant RDP access — check current Hostwinds Windows VPS pricing if you need a low-cost host for your profile library.



