sodcalculator

10 Tech How-To

How to Disable Remote Desktop in Windows 10

Guide 10-38070 · Updated · Step by step

Disabling Remote Desktop in Windows 10 closes the port that allows other devices to connect to your PC over the network. This reduces your system’s attack surface, especially if you don’t need remote access. The process takes about two minutes and requires administrator privileges.

What You’ll Need

  • An account with administrator privileges on the Windows 10 PC.
  • If the PC is joined to a domain, you may need to contact your IT admin for policy changes.

Step-by-Step

  1. Press Windows + I to open Settings.
  2. Click System.
  3. In the left sidebar, select Remote Desktop.
  4. Toggle the switch under Enable Remote Desktop to Off.
  5. If a confirmation dialog appears, click Confirm to disable the feature.
  6. Close Settings. The change takes effect immediately.

Alternatively, you can disable Remote Desktop via Control Panel:

  1. Open Control Panel (search for it in the Start menu).
  2. Go to System and Security > System.
  3. Click Remote settings on the left.
  4. In the Remote tab, select Don’t allow remote connections to this computer.
  5. Click OK.

Common Mistakes

  • Forgetting to disable the service: The Remote Desktop Services (TermService) may still be running even after you turn off the toggle. To fully stop it, you can set the service to Disabled (see Tips).
  • Only disabling via firewall: Blocking port 3389 in Windows Firewall is not the same as disabling Remote Desktop. The feature remains enabled and can be re-enabled by other means.
  • Not checking Group Policy: On domain-joined PCs, a Group Policy setting may override your local toggle. If the toggle is grayed out, a policy is forcing it on.
  • Confusing Remote Assistance with Remote Desktop: Remote Assistance is a separate feature that also allows remote control. Disable it separately if you don’t use it.

Tips

  • Check if Remote Desktop is actually off: Open Command Prompt and run reg query "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections. If it returns 0x1, Remote Desktop is disabled.
  • Disable the service for extra security: Press Windows + R, type services.msc, find Remote Desktop Services, right-click, select Properties, set Startup type to Disabled, and click Stop if it’s running.
  • Use Windows Defender Firewall: Even after disabling Remote Desktop, ensure the firewall rule for port 3389 is blocked. Go to Windows Defender Firewall > Advanced settings > Inbound Rules and disable the rules named “Remote Desktop” if they exist.
  • For domain PCs: If the toggle is grayed out, run gpedit.msc (Pro/Enterprise) and navigate to Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections. Set “Allow users to connect remotely by using Remote Desktop Services” to Disabled.

Troubleshooting

The toggle is grayed out. This usually means a Group Policy is enforcing Remote Desktop. Run gpedit.msc and set the policy mentioned above to Not Configured or Disabled. If the PC is domain-joined, contact your IT admin.

Remote Desktop still works after disabling. First, verify the registry key as described in Tips. If it shows 0x0, the feature is still on – try toggling it off again and restart the PC. Also check if you have third-party remote tools (TeamViewer, AnyDesk) that are not part of Windows.

You get an error when trying to disable. If the Settings app crashes or the toggle won’t move, try the Control Panel method. If that fails, run services.msc and stop the Remote Desktop Services service manually.

You can’t connect to the PC after disabling. That’s expected. If you need to reconnect, enable Remote Desktop again via Settings or Control Panel.

Frequently Asked Questions

Does disabling Remote Desktop affect Remote Assistance?

No. Remote Assistance is a separate feature. To disable it, go to Control Panel > System > Remote settings and uncheck “Allow Remote Assistance invitations to be sent from this computer.”

Will this stop all incoming remote connections?

It stops Windows Remote Desktop (RDP) connections. Other remote tools like TeamViewer or VNC are not affected.

Can I disable Remote Desktop using Command Prompt?

Yes. Run Command Prompt as administrator and execute: reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 1 /f. Then restart the Remote Desktop Services service or reboot.

Is it safe to delete the Remote Desktop users group?

Deleting the group doesn’t disable the feature. It only removes user permissions. The proper way is to turn off the toggle or set the registry key.

Why is Remote Desktop enabled by default on some Windows 10 versions?

Windows 10 Pro and Enterprise have Remote Desktop available but it’s usually off by default. Some OEMs may enable it. Always check after a fresh install.

Do I need to restart after disabling?

No, the change is immediate. However, a restart ensures all related services are fully stopped.

Related

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →